OA
Product
Open-xchange Appsuite Office
by Open-xchange · last CVE Aug 2, 2023
4
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 1Low 1
Watch

Add Open-xchange Appsuite Office to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-26440
7.8
0%
Aug 2
The cacheservice API could be abused to indirectly inject parameters with SQL syntax which was insufficiently sanitized and would later be executed when creating new cache groups
Affected: before 8.11
CVE-2023-26439
7.8
0%
Aug 2
The cacheservice API could be abused to inject parameters with SQL syntax which was insufficiently sanitized before getting executed as SQL statement
Affected: before 8.11
Showing 2