Back

open-xchange

11

CVEs

CVE-2023-24601: OX App Suite before frontend 7.10.6-rev24 allows XSS via a n..

Published on

May 28, 2023

Medium

6.1

/

10

CVE-2023-24601: OX App Suite before frontend 7.10.6-rev24 allows XSS via a n..

Medium

6.1

/

10

Published on

May 28, 2023

CVE-2023-26436: Attackers with access to the "documentconverterws" API were ..

Published on

Jun 20, 2023

High

8.8

/

10

CVE-2023-26436: Attackers with access to the "documentconverterws" API were ..

High

8.8

/

10

Published on

Jun 20, 2023

CVE-2023-26430: Attackers with access to user accounts can inject arbitrary ..

Published on

Aug 2, 2023

Medium

4.3

/

10

CVE-2023-26430: Attackers with access to user accounts can inject arbitrary ..

Medium

4.3

/

10

Published on

Aug 2, 2023

CVE-2023-26439: The cacheservice API could be abused to inject parameters wi..

Published on

Aug 2, 2023

High

7.8

/

10

CVE-2023-26439: The cacheservice API could be abused to inject parameters wi..

High

7.8

/

10

Published on

Aug 2, 2023

CVE-2023-26440: The cacheservice API could be abused to indirectly inject pa..

Published on

Aug 2, 2023

High

7.8

/

10

CVE-2023-26440: The cacheservice API could be abused to indirectly inject pa..

High

7.8

/

10

Published on

Aug 2, 2023

CVE-2023-26445: Frontend themes are defined by user-controllable jslob setti..

Published on

Aug 2, 2023

Medium

5.4

/

10

CVE-2023-26445: Frontend themes are defined by user-controllable jslob setti..

Medium

5.4

/

10

Published on

Aug 2, 2023

CVE-2023-26446: The users clientID at "application passwords" was not saniti..

Published on

Aug 2, 2023

Medium

5.4

/

10

CVE-2023-26446: The users clientID at "application passwords" was not saniti..

Medium

5.4

/

10

Published on

Aug 2, 2023

CVE-2023-26447: The "upsell" widget for the portal allows to specify a produ..

Published on

Aug 2, 2023

Medium

5.4

/

10

CVE-2023-26447: The "upsell" widget for the portal allows to specify a produ..

Medium

5.4

/

10

Published on

Aug 2, 2023

CVE-2023-26448: Custom log-in and log-out locations are used-defined as jslo..

Published on

Aug 2, 2023

Medium

5.4

/

10

CVE-2023-26448: Custom log-in and log-out locations are used-defined as jslo..

Medium

5.4

/

10

Published on

Aug 2, 2023

CVE-2023-26449: The "OX Chat" web service did not specify a media-type when ..

Published on

Aug 2, 2023

Medium

5.4

/

10

CVE-2023-26449: The "OX Chat" web service did not specify a media-type when ..

Medium

5.4

/

10

Published on

Aug 2, 2023

CVE-2023-26450: The "OX Count" web service did not specify a media-type when..

Published on

Aug 2, 2023

Medium

5.4

/

10

CVE-2023-26450: The "OX Count" web service did not specify a media-type when..

Medium

5.4

/

10

Published on

Aug 2, 2023