Vulnerabilities (CVE)

Filtered by vendor Open-xchange Subscribe
Filtered by product Open-xchange Appsuite
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-12645 1 Open-xchange 1 Open-xchange Appsuite 2021-07-21 5.0 MEDIUM 9.8 CRITICAL
OX App Suite 7.10.1 to 7.10.3 has improper input validation for rate limits with a crafted User-Agent header, spoofed vacation notices, and /apps/load memory consumption.
CVE-2019-7158 1 Open-xchange 1 Open-xchange Appsuite 2020-08-24 7.5 HIGH 9.8 CRITICAL
OX App Suite 7.10.0 and earlier has Incorrect Access Control.
CVE-2017-13667 1 Open-xchange 1 Open-xchange Appsuite 2019-05-28 6.5 MEDIUM 9.9 CRITICAL
OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: SSRF.
CVE-2017-17060 1 Open-xchange 1 Open-xchange Appsuite 2019-05-23 7.5 HIGH 9.8 CRITICAL
OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Insecure Permissions.
CVE-2017-5210 1 Open-xchange 1 Open-xchange Appsuite 2019-05-23 5.0 MEDIUM 9.8 CRITICAL
Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Information Exposure.
CVE-2017-5212 1 Open-xchange 1 Open-xchange Appsuite 2019-05-23 7.5 HIGH 9.8 CRITICAL
Open-Xchange GmbH OX App Suite 7.8.3 is affected by: Incorrect Access Control.
CVE-2017-5863 1 Open-xchange 1 Open-xchange Appsuite 2019-05-23 7.5 HIGH 9.8 CRITICAL
Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Incorrect Access Control.