Open-Xchange GmbH

Records318All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical14CVSS 9.0–10.0

CVSS high49CVSS 7.0–8.9

Exploited now

Open-Xchange GmbH records in CISA KEV

No Open-Xchange GmbH vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Open-xchange Appsuite 157 records MEDIUM Ox App Suite 48 records MEDIUM Dovecot 16 records MEDIUM Open-xchange Appsuite Backend 14 records MEDIUM Open-xchange Server 13 records LOW Ox Guard 11 records MEDIUM Open-xchange Appsuite Frontend 8 records HIGH Open-xchange Appsuite Office 4 records LOW

Records

11 records in Ox Guard · all components

TI-2015-07026 CVE-2015-8542 · GHSA-c9h2-cw5f-g747

An issue was discovered in Open-Xchange Guard before 2.2.0-rev8.

MEDIUM 42

An issue was discovered in Open-Xchange Guard before 2.2.0-rev8.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.02211 Published 2016-12-15 No fix listed CWE-320

TI-2018-07786 CVE-2018-10986 · GHSA-jxq6-x56f-3335

OX Guard 2.8.0 has CSRF.

LOW 38

OX Guard 2.8.0 has CSRF.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.0046 Published 2019-07-03 No fix listed CWE-352

TI-2020-17472 CVE-2020-28944 · GHSA-6v4f-fj9h-ppc3

OX Guard 2.10.4 and earlier allows a Denial of Service via a WKS server that responds…

LOW 36

OX Guard 2.10.4 and earlier allows a Denial of Service via a WKS server that responds slowly or with a large amount of data.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0157 Published 2021-04-30 No fix listed CWE-400

TI-2016-03424 CVE-2016-4028 · GHSA-qxh8-75pv-8vmg

An issue was discovered in Open-Xchange OX Guard before 2.4.0-rev8.

LOW 34

An issue was discovered in Open-Xchange OX Guard before 2.4.0-rev8.

CVSS 3.0HIGH 7.5 Network Low privileges No interaction EPSS 0.00709 Published 2016-12-15 No fix listed CWE-255

TI-2016-05890 CVE-2016-6854 · GHSA-8f3m-v9r8-jc7p

An issue was discovered in Open-Xchange OX Guard before 2.4.2-rev5.

LOW 32

An issue was discovered in Open-Xchange OX Guard before 2.4.2-rev5.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.02441 Published 2016-12-15 No fix listed CWE-79

TI-2016-05889 CVE-2016-6853 · GHSA-6jmc-wgh2-9jr6

An issue was discovered in Open-Xchange OX Guard before 2.4.2-rev5.

LOW 32

An issue was discovered in Open-Xchange OX Guard before 2.4.2-rev5.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.02441 Published 2016-12-15 No fix listed CWE-79

TI-2016-05887 CVE-2016-6851 · GHSA-494v-jqp4-m59h

An issue was discovered in Open-Xchange OX Guard before 2.4.2-rev5.

LOW 32

An issue was discovered in Open-Xchange OX Guard before 2.4.2-rev5.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.02643 Published 2016-12-15 No fix listed CWE-79

TI-2020-07539 CVE-2020-9426 · GHSA-jxw2-gvjr-mv4v

OX Guard 2.10.3 and earlier allows XSS.

LOW 30

OX Guard 2.10.3 and earlier allows XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0118 Published 2020-06-15 No fix listed CWE-79

TI-2023-11603 CVE-2023-26456 · GHSA-xmj4-pwxq-wq63

Cross-site scripting in Open-Xchange GmbH OX App Suite

LOW 25

Users were able to set an arbitrary "product name" for OX Guard.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00405 Published 2023-11-02 No fix listed CWE-79

TI-2020-07540 CVE-2020-9427 · GHSA-xjrq-vhch-5226

OX Guard 2.10.3 and earlier allows SSRF.

LOW 25

OX Guard 2.10.3 and earlier allows SSRF.

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.01123 Published 2020-06-15 No fix listed CWE-918

TI-2015-06138 CVE-2015-7385 · GHSA-f3x6-vj5j-c29m

Cross-site scripting (XSS) vulnerability in Open-Xchange OX Guard before 2.0.0-rev11…

LOW 24

Cross-site scripting (XSS) vulnerability in Open-Xchange OX Guard before 2.0.0-rev11 allows remote attackers to inject arbitrary web script or HTML via the uid field in a PGP public key, which is not properly handled in…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01953 Published 2015-11-19 No fix listed CWE-79

Open these records in search →

Critical	14
High	49
Medium	242
Low	13
No CVSS	0