OA
Product
Open-xchange Appsuite
157
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 7High 17Medium 101Low 2
Watch
Add Open-xchange Appsuite to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-26454 | 8.8 | Nov 2 | Requests to fetch image metadata could be abused to include SQL queries that would be executed unchecked Affected: before 7.10.6; 7.10.6; 7.10.6; 7.10.6; 7.10.6; 7.10.6; +34 more |
| CVE-2023-26453 | 8.8 | Nov 2 | Requests to cache an image could be abused to include SQL queries that would be executed unchecked Affected: before 7.10.6; 7.10.6; 7.10.6; 7.10.6; 7.10.6; 7.10.6; +34 more |
| CVE-2023-26452 | 8.8 | Nov 2 | Requests to cache an image and return its metadata could be abused to include SQL queries that would be executed unchecked Affected: before 7.10.6; 7.10.6; 7.10.6; 7.10.6; 7.10.6; 7.10.6; +34 more |
| CVE-2017-8340 | 8.8 | May 22 | Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Incorrect Access Control Affected: through 7.8.3 |
| CVE-2017-6912 | 8.8 | May 22 | Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Incorrect Access Control Affected: through 7.8.3 |
| CVE-2018-5752 | 8.8 | Jun 16 | The backend component in Open-Xchange OX App Suite before 7.6.3-rev36, 7.8.x before 7.8.2-rev39, 7.8.3 before 7.8.3-rev44, and 7.8.4 before 7.8.4-rev22 allows remote attackers to… Affected: through 7.6.3; 7.6.3; 7.6.3; 7.6.3; 7.6.3; 7.6.3; +34 more |
| CVE-2019-14226 | 8.1 | Oct 14 | OX App Suite through 7.10.2 has Insecure Permissions Affected: through 7.10.2 |
| CVE-2019-11521 | 8.1 | Aug 20 | OX App Suite 7.10.1 allows Content Spoofing Affected: 7.10.1 |
| CVE-2023-26455 | 7.8 | Nov 2 | RMI was not requiring authentication when calling ChronosRMIService:setEventOrganizer Affected: before 7.10.6; 7.10.6; 7.10.6; 7.10.6; 7.10.6; 7.10.6; +34 more |
| CVE-2014-5238 | 7.8 | Jan 14 | XML external entity (XXE) vulnerability in Open-Xchange (OX) AppSuite before 7.4.2-rev11 and 7.6.x before 7.6.0-rev9 allows remote attackers to read arbitrary files and possibly… Affected: through 7.4.1; 7.4.2; 7.4.2; 7.4.2; 7.4.2; 7.4.2; +15 more |
| CVE-2020-8543 | 7.5 | Jun 16 | OX App Suite through 7.10.3 has Improper Input Validation Affected: 7.8.4; 7.8.4; 7.8.4; 7.8.4; 7.8.4; 7.8.4; +34 more |
| CVE-2014-5236 | 7.5 | Jan 31 | Multiple absolute path traversal vulnerabilities in documentconverter in Open-Xchange (OX) AppSuite before 7.4.2-rev10 and 7.6.x before 7.6.0-rev10 allow remote attackers to read… Affected: through 7.4.1; 7.4.2; 7.4.2; 7.4.2; 7.4.2; 7.4.2; +15 more |
| CVE-2019-7159 | 7.5 | Jun 18 | OX App Suite 7.10.1 and earlier allows Information Exposure Affected: through 7.10.1 |
| CVE-2017-5211 | 7.5 | May 23 | Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Content Spoofing Affected: through 7.8.3 |
| CVE-2017-12884 | 7.5 | May 10 | OX Software GmbH App Suite 7.8.4 and earlier is affected by: Information Exposure Affected: through 7.8.4 |
| CVE-2016-3174 | 7.4 | Dec 15 | An issue was discovered in Open-Xchange OX AppSuite before 7.8.0-rev27 Affected: through 7.8.0 |
| CVE-2023-29047 | 7.3 | Nov 2 | Imageconverter API endpoints provided methods that were not sufficiently validating and sanitizing client input, allowing to inject arbitrary SQL statements Affected: before 7.10.6; 7.10.6; 7.10.6; 7.10.6; 7.10.6; 7.10.6; +34 more |
Showing 17