OA
Product
Open-xchange Appsuite
157
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 7High 17Medium 101Low 2
Watch
Add Open-xchange Appsuite to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-31934 | 6.1 | Apr 30 | OX App Suite 7.10.4 and earlier allows XSS via a crafted contact object (payload in the position or company field) that is mishandled in the App Suite UI on a smartphone Affected: through 7.10.4 |
| CVE-2021-23936 | 6.1 | Jan 12 | OX App Suite through 7.10.4 allows XSS via the subject of a task Affected: through 7.10.4 |
| CVE-2021-23935 | 6.1 | Jan 12 | OX App Suite through 7.10.4 allows XSS via an appointment in which the location contains JavaScript code Affected: through 7.10.3 |
| CVE-2021-23934 | 6.1 | Jan 12 | OX App Suite through 7.10.4 allows XSS via a contact whose name contains JavaScript code Affected: through 7.10.3 |
| CVE-2021-23933 | 6.1 | Jan 12 | OX App Suite through 7.10.4 allows XSS via JavaScript in a Note referenced by a mail:// URL Affected: through 7.10.3 |
| CVE-2021-23932 | 6.1 | Jan 12 | OX App Suite through 7.10.4 allows XSS via an inline image with a crafted filename Affected: through 7.10.3 |
| CVE-2021-23931 | 6.1 | Jan 12 | OX App Suite through 7.10.4 allows XSS via an inline binary file Affected: through 7.10.3 |
| CVE-2021-23930 | 6.1 | Jan 12 | OX App Suite through 7.10.4 allows XSS via use of the conversion API for a distributedFile Affected: through 7.10.3 |
| CVE-2021-23929 | 6.1 | Jan 12 | OX App Suite through 7.10.4 allows XSS via a crafted Content-Disposition header in an uploaded HTML document to an ajax/share/<share-token>?delivery=view URI Affected: through 7.10.3 |
| CVE-2021-23928 | 6.1 | Jan 12 | OX App Suite through 7.10.3 allows XSS via the ajax/apps/manifests query string Affected: through 7.10.3 |
| CVE-2020-24701 | 6.1 | Jan 12 | OX App Suite through 7.10.4 allows XSS via the app loading mechanism (the PATH_INFO to the /appsuite URI) Affected: through 7.10.4 |
| CVE-2019-16717 | 6.1 | Jan 6 | OX App Suite through 7.10.2 has XSS Affected: through 7.10.2 |
| CVE-2013-7486 | 6.1 | Jan 2 | Cross-site scripting (XSS) vulnerability in the backend in Open-Xchange (OX) AppSuite 7.2.x before 7.2.2-rev27 and 7.4.x before 7.4.0-rev20 allows remote attackers to inject… Affected: 7.2.2; 7.4.0 |
| CVE-2013-7485 | 6.1 | Jan 2 | Cross-site scripting (XSS) vulnerability in the backend in Open-Xchange (OX) AppSuite 7.2.x before 7.2.2-rev26 and 7.4.x before 7.4.0-rev16 allows remote attackers to inject… Affected: 7.2.2; 7.4.0 |
| CVE-2013-6242 | 6.1 | Jan 2 | Cross-site scripting (XSS) vulnerability in the frontend in Open-Xchange (OX) AppSuite 6.22.3 before 6.22.3-rev5 and 6.22.4 before 6.22.4-rev12 allows remote attackers to inject… Affected: 6.22.3; 6.22.4; 7.2.2; 7.4.0 |
| CVE-2019-14227 | 6.1 | Oct 14 | OX App Suite 7.10.1 and 7.10.2 allows XSS Affected: 7.10.1; 7.10.2 |
| CVE-2017-5213 | 6.1 | May 23 | Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Cross Site Scripting (XSS) Affected: through 7.8.3 |
| CVE-2017-15030 | 6.1 | May 23 | Open-Xchange GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS) Affected: through 7.8.4 |
| CVE-2017-9808 | 6.1 | May 22 | OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS) Affected: through 7.8.4 |
| CVE-2017-5864 | 6.1 | May 22 | Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Cross Site Scripting (XSS) Affected: through 7.8.3 |
| CVE-2017-12885 | 6.1 | May 10 | OX Software GmbH App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS) Affected: through 7.8.4 |
| CVE-2018-12611 | 6.1 | Jan 29 | OX App Suite 7.8.4 and earlier allows Directory Traversal Affected: through 7.8.4 |
| CVE-2017-6913 | 6.1 | Sep 18 | Cross-site scripting (XSS) vulnerability in the Open-Xchange webmail before 7.6.3-rev28 allows remote attackers to inject arbitrary web script or HTML via the event attribute in a… Affected: through 7.6.3 |
| CVE-2018-9997 | 6.1 | Jul 5 | Cross-site scripting (XSS) vulnerability in mail compose in Open-Xchange OX App Suite before 7.6.3-rev31, 7.8.x before 7.8.2-rev31, 7.8.3 before 7.8.3-rev41, and 7.8.4 before… Affected: through 7.6.3; 7.6.3; 7.6.3; 7.6.3; 7.6.3; 7.6.3; +34 more |
| CVE-2015-1588 | 6.1 | Jun 8 | Multiple cross-site scripting (XSS) vulnerabilities in Open-Xchange Server 6 and OX AppSuite before 7.4.2-rev43, 7.6.0-rev38, and 7.6.1-rev21 Affected: through 7.4.2; 7.6.0; 7.6.1 |
| CVE-2016-6850 | 6.1 | Dec 15 | An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8 Affected: through 7.8.2 |
| CVE-2016-6847 | 6.1 | Dec 15 | An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8 Affected: through 7.8.2 |
| CVE-2016-6845 | 6.1 | Dec 15 | An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8 Affected: through 7.8.2 |
| CVE-2016-6844 | 6.1 | Dec 15 | An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8 Affected: through 7.8.2 |
| CVE-2016-6843 | 6.1 | Dec 15 | An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8 Affected: through 7.8.2 |
| CVE-2016-6842 | 6.1 | Dec 15 | An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8 Affected: through 7.8.2 |
| CVE-2016-5740 | 6.1 | Dec 15 | An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev5 Affected: through 7.8.2 |
| CVE-2016-5124 | 6.1 | Dec 15 | An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev14 Affected: through 7.8.1 |
| CVE-2016-4045 | 6.1 | Dec 15 | An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev11 Affected: through 7.8.1 |
| CVE-2016-4026 | 6.1 | Dec 15 | An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev11 Affected: through 7.8.1 |
| CVE-2016-2840 | 6.1 | Dec 15 | An issue was discovered in Open-Xchange Server 6 / OX AppSuite before 7.8.0-rev26 Affected: through 7.8.0 |
| CVE-2016-4046 | 5.8 | Dec 15 | An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev11 Affected: through 7.8.1 |
| CVE-2018-5755 | 5.5 | Jun 16 | Absolute path traversal vulnerability in the readerengine component in Open-Xchange OX App Suite before 7.6.3-rev3, 7.8.x before 7.8.2-rev4, 7.8.3 before 7.8.3-rev5, and 7.8.4… Affected: through 7.6.3; 7.8.0; 7.8.2; 7.8.3; 7.8.4; 7.8.4 |
| CVE-2016-6848 | 5.5 | Dec 15 | An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8 Affected: through 7.8.2 |
| CVE-2023-41708 | 5.4 | Feb 12 | References to the "app loader" functionality could contain redirects to unexpected locations Affected: before 7.10.6; 7.10.6; 7.10.6; 7.10.6; 7.10.6; 7.10.6; +34 more |
| CVE-2023-29045 | 5.4 | Nov 2 | Documents operations, in this case "drawing", could be manipulated to contain invalid data types, possibly script code Affected: before 7.10.6; 7.10.6; 7.10.6; 7.10.6; 7.10.6; 7.10.6; +34 more |
| CVE-2023-29044 | 5.4 | Nov 2 | Documents operations could be manipulated to contain invalid data types, possibly script code Affected: before 7.10.6; 7.10.6; 7.10.6; 7.10.6; 7.10.6; 7.10.6; +34 more |
| CVE-2022-29853 | 5.4 | Dec 26 | OX App Suite through 8.2 allows XSS via a certain complex hierarchy that forces use of Show Entire Message for a huge HTML e-mail message Affected: before 7.10.5; 7.10.5; 7.10.5; 7.10.5; 7.10.5; 7.10.5; +34 more |
| CVE-2022-29852 | 5.4 | Dec 26 | OX App Suite through 8.2 allows XSS because BMFreehand10 and image/x-freehand are not blocked Affected: before 7.10.5; 8.2 before 8.2.324; 7.10.5; 7.10.5; 7.10.5; 7.10.5; +34 more |
| CVE-2021-26699 | 5.4 | Jul 22 | OX App Suite before 7.10.3-rev4 and 7.10.4 before 7.10.4-rev4 allows SSRF via a shared SVG document that is mishandled by the imageconverter component when the .png extension is… Affected: 7.10.3; 7.10.3; 7.10.3; 7.10.3; 7.10.3; 7.10.3; +34 more |
| CVE-2020-24700 | 5.4 | Jan 12 | OX App Suite through 7.10.3 allows SSRF because GET requests are sent to arbitrary domain names with an initial autoconfig Affected: through 7.10.3 |
| CVE-2020-12646 | 5.4 | Aug 31 | OX App Suite 7.10.3 and earlier allows XSS via text/x-javascript, text/rdf, or a PDF document Affected: through 7.10.3 |
| CVE-2020-8542 | 5.4 | Jun 16 | OX App Suite through 7.10.3 allows XSS Affected: 7.10.1; 7.10.1; 7.10.1; 7.10.1; 7.10.1; 7.10.1; +34 more |
| CVE-2019-14225 | 5.4 | Oct 14 | OX App Suite 7.10.1 and 7.10.2 allows SSRF Affected: 7.10.1; 7.10.2 |
| CVE-2019-11522 | 5.4 | Aug 20 | OX App Suite 7.10.0 to 7.10.2 allows XSS Affected: 7.10.0 through 7.10.2 |