Login Request a demo
OA
Product
OX App Suite
by Open-xchange · last CVE May 6, 2024
48
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities48In the news0Timeline
Severity mix
Critical 4High 2Medium 42Low 0
Severity
All severities48Critical4High2Medium42Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add OX App Suite to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-29851
9.8
4%
Oct 24
documentconverter in OX App Suite through 7.10.6, in a non-default configuration with ghostscript, allows OS Command Injection because file conversion may occur for an EPS…
Affected: through 7.10.6
CVE-2022-24405
9.8
3%
Jul 27
OX App Suite through 7.10.6 allows OS Command Injection via a serialized Java class to the Documentconverter API
Affected: through 7.10.6
CVE-2022-23100
9.8
3%
Jul 27
OX App Suite through 7.10.6 allows OS Command Injection via Documentconverter (e.g., through an email attachment)
Affected: through 7.10.6
CVE-2023-29050
9.6
2%
Jan 8
The optional "LDAP contacts provider" could be abused by privileged users to inject LDAP filter strings that allow to access content outside of the intended hierarchy
Affected: before 7.10.6; 7.10.6; 7.10.6; 7.10.6; 7.10.6; 7.10.6; +34 more
Showing 4