Versions
Open-xchange Ox App SuiteUser-defined OXMF templates could be used to access a limited part of the internal OX App Suite Java…
Open-xchange Ox App SuiteThe optional "LDAP contacts provider" could be abused by privileged users to inject LDAP filter stri…
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Open-xchange Ox App SuiteOX App Suite before backend 7.10.6-rev37 allows authenticated users to change the appointments of ar…
Open-xchange Ox App SuiteOX App Suite before backend 7.10.6-rev37 does not enforce 2FA for all endpoints, e.g., reading from …
Open-xchange Ox App SuiteOX App Suite before frontend 7.10.6-rev24 allows the loading (without user consent) of an e-mail mes…
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Open-xchange Ox App SuiteOX App Suite before backend 7.10.6-rev37 does not check size limits when downloading, e.g., potentia…
Open-xchange Ox App SuiteOX App Suite before backend 7.10.6-rev37 does not check HTTP header lengths when downloading, e.g., …
Open-xchange Ox App SuiteOX App Suite before backend 7.10.6-rev37 has an information leak in the handling of distribution lis…
Open-xchange Ox App SuiteOX App Suite before backend 7.10.6-rev37 allows authenticated users to bypass access controls (for r…
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Open-xchange Ox App SuiteOS Command Injection, Command Injection
Open-xchange Ox App SuiteOS Command Injection, Command Injection
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Open-xchange Ox App SuiteOS Command Injection, Command Injection
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Open-xchange Ox App SuiteOX App Suite 7.10.5 allows Information Exposure because a caching mechanism can caused a Modified By…
Open-xchange Ox App SuiteOX App Suite through 7.10.5 has Incorrect Access Control for retrieval of session information via th…
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.