Total 254 security vulnerabilities recorded for open-xchange software and firmware.
OX App Suite through 7.10.4 allows XSS via the app loading mechanism (the PATH_INFO to the /appsuite URI)....
OX App Suite through 7.10.3 allows SSRF because GET requests are sent to arbitrary domain names with an initial autoconfig. substring....
OX App Suite through 7.10.3 allows stats/diagnostic?param= XSS....
OX App Suite through 7.10.3 allows Information Exposure because a user can obtain the IP address and User-Agent string of a different user (via the se...
OX App Suite through 7.10.3 allows SSRF via the the /ajax/messaging/message message API....
OX App Suite 7.10.3 and earlier allows XSS via text/x-javascript, text/rdf, or a PDF document....
OX App Suite 7.10.1 to 7.10.3 has improper input validation for rate limits with a crafted User-Agent header, spoofed vacation notices, and /apps/load...
OX App Suite 7.10.3 and earlier allows SSRF, related to the mail account API and the /folder/list API....
OX App Suite 7.10.3 and earlier has Incorrect Access Control via an /api/subscriptions request for a snippet containing an email address....
OX App Suite through 7.10.3 has Improper Input Validation....
OX App Suite through 7.10.3 allows XXE attacks....
Multiple absolute path traversal vulnerabilities in documentconverter in Open-Xchange (OX) AppSuite before 7.4.2-rev10 and 7.6.x before 7.6.0-rev10 al...
XML external entity (XXE) vulnerability in Open-Xchange (OX) AppSuite before 7.4.2-rev11 and 7.6.x before 7.6.0-rev9 allows remote attackers to read a...
OX App Suite through 7.10.2 has Incorrect Access Control....
Cross-site scripting (XSS) vulnerability in the backend in Open-Xchange (OX) AppSuite 7.2.x before 7.2.2-rev27 and 7.4.x before 7.4.0-rev20 allows rem...
Cross-site scripting (XSS) vulnerability in the backend in Open-Xchange (OX) AppSuite 7.2.x before 7.2.2-rev26 and 7.4.x before 7.4.0-rev16 allows rem...
Cross-site scripting (XSS) vulnerability in the frontend in Open-Xchange (OX) AppSuite 6.22.3 before 6.22.3-rev5 and 6.22.4 before 6.22.4-rev12 allows...
OX App Suite 7.10.1 and 7.10.2 allows XSS....