CVE-2017-17062: The backend component in Open-Xchange OX App Suite before 7.6.3-rev35, 7.8.x before 7.8.2-rev38, 7.8.3 before 7.8.3-rev41, and 7.8.4 before 7.8.4-rev19 allows…

PriorityP343medium6.5CVSS 3.0

AVNACLPRLUINSUCNIHAN

EXPLOIT

EPSS

3.66%

88.2th percentile

The backend component in Open-Xchange OX App Suite before 7.6.3-rev35, 7.8.x before 7.8.2-rev38, 7.8.3 before 7.8.3-rev41, and 7.8.4 before 7.8.4-rev19 allows remote authenticated users to save arbitrary user attributes by leveraging improper privilege management.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
open-xchange	open-xchange_appsuite	<= 7.6.3	—
open-xchange	open-xchange_appsuite	—	—
open-xchange	open-xchange_appsuite	—	—
open-xchange	open-xchange_appsuite	—	—
open-xchange	open-xchange_appsuite	—	—
open-xchange	open-xchange_appsuite	—	—

CVSS provenance

nvdv3.06.5MEDIUMCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:N/I:P/A:N

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.