CVE-2016-6846: XSS
Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite backend before 7.6.2-rev59, 7.8.0 before 7.8.0-rev38, 7.8.2 before 7.8.2-rev8; AppSuite frontend before 7.6.2-rev47, 7.8.0 before 7.8.0-rev30, and 7.8.2 before 7.8.2-rev8; Office Web before 7.6.2-rev16, 7.8.0 before 7.8.0-rev10, and 7.8.2 before 7.8.2-rev5; and Documentconverter-API before 7.8.2-rev5 allows remote attackers to inject arbitrary web script or HTML.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-6846?
CVE-2016-6846 has been classified as a medium severity vulnerability due to its potential for cross-site scripting (XSS) attacks.
How do I fix CVE-2016-6846?
To fix CVE-2016-6846, you should upgrade your Open-Xchange AppSuite backend, frontend, and Office Web to the latest versions that are not affected by this vulnerability.
What impact does CVE-2016-6846 have on users?
CVE-2016-6846 can allow attackers to inject malicious scripts into web applications, potentially compromising user data and session information.
Which versions are vulnerable to CVE-2016-6846?
Versions of Open-Xchange AppSuite backend, frontend, and Office Web prior to specified revision numbers are vulnerable to CVE-2016-6846.
Is there a patch available for CVE-2016-6846?
Yes, patches are included in the updated versions of Open-Xchange software that address the vulnerabilities detailed in CVE-2016-6846.