OA
Product
OX App Suite
by Open-Xchange GmbH · last CVE Nov 27, 2025
6
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 5Low 0
Watch

Add OX App Suite to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-30188
7.5
0%
Oct 31
Malicious or unintentional API requests can be used to add significant amount of data to caches
Affected: through 2.1.7
CVE-2025-59025
6.1
0%
Nov 27
Malicious e-mail content can be used to execute script code
Affected: through 8.35.110; through 8.39.85; through 8.40.73; through 8.41.50
CVE-2025-59026
5.4
0%
Nov 27
Malicious content uploaded as file can be used to execute script code when following attacker-controlled links
Affected: through 8.35.110; through 8.39.85; through 8.40.73; through 8.41.67
CVE-2025-30190
5.4
0%
Nov 27
Malicious content at office documents can be used to inject script code when editing a document
Affected: through 8.35.1513817; through 8.39.1565928; through 8.40.1565934; through 8.41.1523927
CVE-2025-30186
5.4
0%
Nov 27
Malicious content uploaded as file can be used to execute script code when following attacker-controlled links
Affected: through 8.35.107; through 8.38.89; through 8.39.83; through 8.40.68; through 8.41.60
CVE-2025-30191
5.4
0%
Oct 31
Malicious content from E-Mail can be used to perform a redressing attack
Affected: through 7.6.3-rev77; through 8.35.111; through 8.38.82; through 8.39.79; through 8.40.57
Showing 6