CVE-2013-6997: XSS
First published: Thu Jan 09 2014(Updated: )
Multiple cross-site scripting (XSS) vulnerabilities in Open-Xchange (OX) AppSuite 7.4.0 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) an HTML email with crafted CSS code containing wildcards or (2) office documents containing "crafted hyperlinks with script URL handlers."
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Open-xchange Open-xchange Appsuite | <=7.4.0 | |
| Open-xchange Open-xchange Appsuite | =6.20.7 | |
| Open-xchange Open-xchange Appsuite | =6.22.0 | |
| Open-xchange Open-xchange Appsuite | =6.22.1 | |
| Open-xchange Open-xchange Appsuite | =7.0.1 | |
| Open-xchange Open-xchange Appsuite | =7.0.2 | |
| Open-xchange Open-xchange Appsuite | =7.2.0 | |
| Open-xchange Open-xchange Appsuite | =7.2.1 | |
| Open-xchange Open-xchange Appsuite | =7.2.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://software.open-xchange.com/OX6/doc/Release_Notes_for_Public_Patch_Release_1766_7.4.0_Rev21_2013_12_13.pdf
- http://www.osvdb.org/101714
- http://www.osvdb.org/101715
- http://www.securityfocus.com/archive/1/530681/100/0/threaded
- http://www.securityfocus.com/bid/64676
- http://www.securitytracker.com/id/1029554
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90113
- collector/nvd-index
- agent/references
- agent/weakness
- agent/severity
- agent/author
- agent/type
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- agent/event
- collector/mitre-cve
- source/MITRE
- vendor/open-xchange
- canonical/open-xchange open-xchange appsuite
- version/open-xchange open-xchange appsuite/7.4.0
- version/open-xchange open-xchange appsuite/6.20.7
- version/open-xchange open-xchange appsuite/6.22.0
- version/open-xchange open-xchange appsuite/6.22.1
- version/open-xchange open-xchange appsuite/7.0.1
- version/open-xchange open-xchange appsuite/7.0.2
- version/open-xchange open-xchange appsuite/7.2.0
- version/open-xchange open-xchange appsuite/7.2.1
- version/open-xchange open-xchange appsuite/7.2.2