OS
Product
Open-xchange Server
13
CVEs
0
On KEV
6.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 1Low 0
Watch
Add Open-xchange Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-1588 | 6.1 | Jun 8 | Multiple cross-site scripting (XSS) vulnerabilities in Open-Xchange Server 6 and OX AppSuite before 7.4.2-rev43, 7.6.0-rev38, and 7.6.1-rev21 Affected: 6.0; 6.22.12; 6.22.13 |
| CVE-2015-5375 | – | Sep 28 | Cross-site scripting (XSS) vulnerability in unspecified dialogs for printing content in the Front End in Open-Xchange Server 6 and OX App Suite before 6.22.8-rev8, 6.22.9 before… Affected: through 6.0 |
| CVE-2013-5698 | – | Sep 5 | Cross-site scripting (XSS) vulnerability in Open-Xchange AppSuite and Server before 6.22.0 rev16, 6.22.1 before rev19, 7.0.1 before rev7, 7.0.2 before rev11, and 7.2.0 before rev8… Affected: 6.22.0; 6.22.1; 7.0.1; 7.0.2; 7.2.0 |
| CVE-2013-3106 | – | Sep 5 | Multiple cross-site scripting (XSS) vulnerabilities in Open-Xchange AppSuite and Server before 6.20.7 rev18, 6.22.0 before rev16, 6.22.1 before rev19, 7.0.1 before rev7, 7.0.2… Affected: 6.20.7; 6.22.0; 6.22.1; 7.0.1; 7.0.2; 7.2.0 |
| CVE-2013-2583 | – | Sep 5 | Multiple cross-site scripting (XSS) vulnerabilities in Open-Xchange AppSuite and Server before 6.20.7 rev16, 6.22.0 before rev15, 6.22.1 before rev17, 7.0.1 before rev6, and 7.0.2… Affected: 6.20.7; 6.22.0; 6.22.1; 7.0.1; 7.0.2 |
| CVE-2013-2582 | – | Sep 5 | CRLF injection vulnerability in the redirect servlet in Open-Xchange AppSuite and Server before 6.22.0 rev15, 6.22.1 before rev17, 7.0.1 before rev6, and 7.0.2 before rev7 allows… Affected: 6.22.0; 6.22.1; 7.0.1; 7.0.2 |
| CVE-2013-1651 | – | Sep 5 | OXUpdater in Open-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before rev14 does not verify X.509 certificates from SSL servers, which allows… Affected: 6.20.7; 6.22.0; 6.22.1 |
| CVE-2013-1650 | – | Sep 5 | Open-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before rev14 uses weak permissions (group "other" readable) under opt/open-xchange/etc/, which allows… Affected: 6.20.7; 6.22.0; 6.22.1 |
| CVE-2013-1649 | – | Sep 5 | Open-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before rev14 uses the crypt and SHA-1 algorithms for password hashing, which makes it easier for… Affected: 6.20.7; 6.22.0; 6.22.1 |
| CVE-2013-1648 | – | Sep 5 | The Subscriptions feature in Open-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before rev14 does not properly validate the publication-source URL, which… Affected: 6.20.7; 6.22.0; 6.22.1 |
| CVE-2013-1647 | – | Sep 5 | Multiple CRLF injection vulnerabilities in Open-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before rev14 allow remote attackers to inject arbitrary HTTP… Affected: 6.20.7; 6.22.0; 6.22.1 |
| CVE-2013-1646 | – | Sep 5 | Multiple cross-site scripting (XSS) vulnerabilities in Open-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before rev14 allow remote attackers to inject… Affected: 6.20.7; 6.22.0; 6.22.1 |
| CVE-2013-1645 | – | Sep 5 | Directory traversal vulnerability in Open-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before rev14 allows remote authenticated users to read arbitrary… Affected: 6.20.7; 6.22.0; 6.22.1 |
Showing 13