Vendors / Open-Xchange GmbH Records 318 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 14
CVSS high 49
Exploited now Open-Xchange GmbH records in CISA KEV No Open-Xchange GmbH vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 34
The cacheservice API could be abused to indirectly inject parameters with SQL syntax which was insufficiently sanitized and would later be executed when creating new cache groups.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00412 · Published 2023-08-02 · No fix listed CWE-89
Priority LOW 34
The cacheservice API could be abused to inject parameters with SQL syntax which was insufficiently sanitized before getting executed as SQL statement.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00432 · Published 2023-08-02 · No fix listed CWE-89
Priority LOW 26
Cacheservice did not correctly check if relative cache object were pointing to the defined absolute location when accessing resources.
CVSS 3.1 MEDIUM 5.7· Physical · No auth · No interaction · EPSS 0.00397 · Published 2023-08-02 · No fix listed CWE-200
Priority LOW 16
In case Cacheservice was configured to use a sproxyd object-storage backend, it would follow HTTP redirects issued by that backend.
CVSS 3.1 LOW 3.2· Local · No auth · No interaction · EPSS 0.00356 · Published 2023-08-02 · No fix listed CWE-918
Open these records in search → All records by CVSS severity
14 49 242 13 0
THREATIST.IORead the docs