open-xchange

272 tracked vulnerabilities.

CVE-2020-9427 MEDIUM
OX Guard 2.10.3 - Server-Side Request Forgery
Jun 15, 2020
CVSS 5.0
EPSS 0.00
CVE-2020-9426 MEDIUM
OX Guard 2.10.3 - Cross-Site Scripting
Jun 15, 2020
CVSS 6.1
EPSS 0.01
CVE-2019-18846 MEDIUM
Open-Xchange App Suite < 7.10.2 - Server-Side Request Forgery
Feb 21, 2020
CVSS 5.0
EPSS 0.00
CVE-2019-16717 MEDIUM
OX App Suite <7.10.2 - XSS
Jan 06, 2020
CVSS 6.1
EPSS 0.00
CVE-2019-16716 MEDIUM
OX App Suite <7.10.2 - Info Disclosure
Jan 06, 2020
CVSS 6.6
EPSS 0.00
CVE-2019-14227 MEDIUM
OX App Suite 7.10.1-7.10.2 - XSS
Oct 14, 2019
CVSS 6.1
EPSS 0.00
CVE-2019-14226 HIGH
OX App Suite <7.10.2 - Info Disclosure
Oct 14, 2019
CVSS 8.1
EPSS 0.00
CVE-2019-14225 MEDIUM
Open-Xchange AppSuite 7.10.1-7.10.2 - Server-Side Request Forgery
Oct 14, 2019
CVSS 5.4
EPSS 0.00
CVE-2019-11806 LOW
OX App Suite <7.10.1 - Info Disclosure
Aug 20, 2019
CVSS 3.3
EPSS 0.00
CVE-2019-11522 MEDIUM
Open-Xchange AppSuite 7.10.0-7.10.2 - Cross-Site Scripting
Aug 20, 2019
CVSS 5.4
EPSS 0.00
CVE-2019-11521 HIGH
Open-Xchange App Suite 7.10.1 - Content Spoofing
Aug 20, 2019
CVSS 8.1
EPSS 0.00
CVE-2019-7159 HIGH
OX App Suite <7.10.1 - Info Disclosure
Jun 18, 2019
CVSS 7.5
EPSS 0.00
CVE-2019-7158 CRITICAL
OX App Suite <7.10.0 - Info Disclosure
Jun 17, 2019
CVSS 9.8
EPSS 0.01
CVE-2018-10986 HIGH
OX Guard 2.8.0 - Cross-Site Request Forgery
Jul 03, 2019
CVSS 8.8
EPSS 0.00
CVE-2018-13104 MEDIUM
Open-xchange Appsuite < 7.8.4 - XSS
Mar 21, 2019
CVSS 5.4
EPSS 0.00
CVE-2018-13103 MEDIUM
Open-xchange Appsuite < 7.8.4 - SSRF
Mar 21, 2019
CVSS 5.4
EPSS 0.00
CVE-2018-12611 MEDIUM
OX App Suite <7.8.4 - Path Traversal
Jan 30, 2019
CVSS 6.1
EPSS 0.00
CVE-2018-12610 MEDIUM
OX App Suite <7.8.4 - Info Disclosure
Jan 30, 2019
CVSS 5.3
EPSS 0.00
CVE-2018-12609 MEDIUM
OX App Suite <7.8.4 - Server-Side Request Forgery
Jan 30, 2019
CVSS 6.5
EPSS 0.00
CVE-2018-9998 MEDIUM
Open-Xchange App Suite Information Disclosure via Task API Folder Parameter
Jul 05, 2018
CVSS 6.5
EPSS 0.00
CVE-2018-9997 MEDIUM
Open-Xchange AppSuite XSS via Data-Target Attribute
Jul 05, 2018
CVSS 6.1
EPSS 0.00
CVE-2018-5756 MEDIUM
Open-xchange Appsuite < 7.6.3 - Improper Privilege Management
Jun 16, 2018
CVSS 4.3
EPSS 0.01
CVE-2018-5755 MEDIUM
Open-Xchange OX App Suite <7.6.3-rev3-7.8.4-rev4 - Path Traversal
Jun 16, 2018
CVSS 5.5
EPSS 0.01
CVE-2018-5754 MEDIUM
Open-Xchange OX App Suite <7.8.3-rev12 & <7.8.4-rev9 - XSS
Jun 16, 2018
CVSS 5.4
EPSS 0.00
CVE-2018-5753 MEDIUM
Open-Xchange OX App Suite <7.6.3-7.8.4 - Info Disclosure
Jun 16, 2018
CVSS 6.5
EPSS 0.02