Open-Xchange Appsuite vulnerabilities

146 known vulnerabilities affecting open-xchange/open-xchange_appsuite.

Total CVEs
146
CISA KEV
0
Public exploits
9
Exploited in wild
0
Severity breakdown
CRITICAL7HIGH17MEDIUM117LOW5

Vulnerabilities

Page 4 of 8
CVE-2019-7159HIGHCVSS 7.5≤ 7.10.12019-06-18
CVE-2019-7159 [HIGH] CVE-2019-7159: OX App Suite 7.10.1 and earlier allows Information Exposure. OX App Suite 7.10.1 and earlier allows Information Exposure.
nvd
CVE-2019-7158CRITICALCVSS 9.8≤ 7.10.02019-06-17
CVE-2019-7158 [CRITICAL] CVE-2019-7158: OX App Suite 7.10.0 and earlier has Incorrect Access Control. OX App Suite 7.10.0 and earlier has Incorrect Access Control.
nvd
CVE-2017-5212CRITICALCVSS 9.8v7.8.32019-05-23
CVE-2017-5212 [CRITICAL] CWE-284 CVE-2017-5212: Open-Xchange GmbH OX App Suite 7.8.3 is affected by: Incorrect Access Control. Open-Xchange GmbH OX App Suite 7.8.3 is affected by: Incorrect Access Control.
nvd
CVE-2017-17060CRITICALCVSS 9.8≤ 7.8.42019-05-23
CVE-2017-17060 [CRITICAL] CWE-275 CVE-2017-17060: OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Insecure Permissions. OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Insecure Permissions.
nvd
CVE-2017-13667CRITICALCVSS 9.9≤ 7.8.42019-05-23
CVE-2017-13667 [CRITICAL] CWE-918 CVE-2017-13667: OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: SSRF. OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: SSRF.
nvd
CVE-2017-5210CRITICALCVSS 9.8≤ 7.8.32019-05-23
CVE-2017-5210 [CRITICAL] CWE-200 CVE-2017-5210: Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Information Exposure. Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Information Exposure.
nvd
CVE-2017-5211HIGHCVSS 7.5≤ 7.8.32019-05-23
CVE-2017-5211 [HIGH] CWE-20 CVE-2017-5211: Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Content Spoofing. Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Content Spoofing.
nvd
CVE-2017-15030MEDIUMCVSS 6.1≤ 7.8.42019-05-23
CVE-2017-15030 [MEDIUM] CWE-79 CVE-2017-15030: Open-Xchange GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS). Open-Xchange GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS).
nvd
CVE-2017-17061MEDIUMCVSS 5.4≤ 7.8.42019-05-23
CVE-2017-17061 [MEDIUM] CWE-79 CVE-2017-17061: OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS). OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS).
nvd
CVE-2017-5213MEDIUMCVSS 6.1≤ 7.8.32019-05-23
CVE-2017-5213 [MEDIUM] CWE-79 CVE-2017-5213: Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Cross Site Scripting (XSS). Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Cross Site Scripting (XSS).
nvd
CVE-2017-13668MEDIUMCVSS 5.4≤ 7.8.42019-05-23
CVE-2017-13668 [MEDIUM] CWE-79 CVE-2017-13668: OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS). OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS).
nvd
CVE-2017-15029MEDIUMCVSS 4.3≤ 7.8.42019-05-23
CVE-2017-15029 [MEDIUM] CWE-918 CVE-2017-15029: Open-Xchange GmbH OX App Suite 7.8.4 and earlier is affected by: SSRF. Open-Xchange GmbH OX App Suite 7.8.4 and earlier is affected by: SSRF.
nvd
CVE-2017-5863CRITICALCVSS 9.8≤ 7.8.32019-05-22
CVE-2017-5863 [CRITICAL] CWE-284 CVE-2017-5863: Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Incorrect Access Control. Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Incorrect Access Control.
nvd
CVE-2017-6912HIGHCVSS 8.8≤ 7.8.32019-05-22
CVE-2017-6912 [HIGH] CWE-284 CVE-2017-6912: Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Incorrect Access Control. Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Incorrect Access Control.
nvd
CVE-2017-8340HIGHCVSS 8.8≤ 7.8.32019-05-22
CVE-2017-8340 [HIGH] CWE-284 CVE-2017-8340: Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Incorrect Access Control. Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Incorrect Access Control.
nvd
CVE-2017-9809MEDIUMCVSS 5.3≤ 7.8.42019-05-22
CVE-2017-9809 [MEDIUM] CWE-200 CVE-2017-9809: OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Information Exposure. OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Information Exposure.
nvd
CVE-2017-8341MEDIUMCVSS 5.3≤ 7.8.32019-05-22
CVE-2017-8341 [MEDIUM] CWE-20 CVE-2017-8341: Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Content Spoofing. Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Content Spoofing.
nvd
CVE-2017-9808MEDIUMCVSS 6.1≤ 7.8.42019-05-22
CVE-2017-9808 [MEDIUM] CWE-79 CVE-2017-9808: OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS). OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS).
nvd
CVE-2017-5864MEDIUMCVSS 6.1≤ 7.8.32019-05-22
CVE-2017-5864 [MEDIUM] CWE-79 CVE-2017-5864: Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Cross Site Scripting (XSS). Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Cross Site Scripting (XSS).
nvd
CVE-2017-12884HIGHCVSS 7.5≤ 7.8.42019-05-10
CVE-2017-12884 [HIGH] CWE-200 CVE-2017-12884: OX Software GmbH App Suite 7.8.4 and earlier is affected by: Information Exposure. OX Software GmbH App Suite 7.8.4 and earlier is affected by: Information Exposure.
nvd