CVE-2025-30190
MEDIUMOX App Suite < 8.35.1513817, < 8.39.1565928, < 8.40.1565934, < 8.41.1523927 - Stored XSS via Office Document Editing
Title source: llmDescription
Malicious content at office documents can be used to inject script code when editing a document. Unintended actions can be executed in the context of the users account, including exfiltration of sensitive information. Please deploy the provided updates and patch releases. No publicly available exploits are known
References (1)
Core 1
Core References
Vendor Advisory vendor-advisory
https://documentation.open-xchange.com/appsuite/security/advisories/csaf/2025/oxas-adv-2025-0003.json
Scores
CVSS v3
5.4
EPSS
0.0015
EPSS Percentile
5.0%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-79
Status
published
Products (4)
Open-Xchange GmbH/OX App Suite
< 8.35.1513817
Open-Xchange GmbH/OX App Suite
< 8.39.1565928
Open-Xchange GmbH/OX App Suite
< 8.40.1565934
Open-Xchange GmbH/OX App Suite
< 8.41.1523927
Published
Nov 27, 2025
Tracked Since
Feb 18, 2026