Vulnerabilities

TI-2023-11603 CVE-2023-26456 · GHSA-xmj4-pwxq-wq63

Cross-site scripting in Open-Xchange GmbH OX App Suite

LOW 25

Users were able to set an arbitrary "product name" for OX Guard.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00405 Published 2023-11-02 No fix listed CWE-79

TI-2020-17472 CVE-2020-28944 · GHSA-6v4f-fj9h-ppc3

OX Guard 2.10.4 and earlier allows a Denial of Service via a WKS server that responds…

LOW 36

OX Guard 2.10.4 and earlier allows a Denial of Service via a WKS server that responds slowly or with a large amount of data.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0157 Published 2021-04-30 No fix listed CWE-400

TI-2020-07539 CVE-2020-9426 · GHSA-jxw2-gvjr-mv4v

OX Guard 2.10.3 and earlier allows XSS.

LOW 30

OX Guard 2.10.3 and earlier allows XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0118 Published 2020-06-15 No fix listed CWE-79

TI-2020-07540 CVE-2020-9427 · GHSA-xjrq-vhch-5226

OX Guard 2.10.3 and earlier allows SSRF.

LOW 25

OX Guard 2.10.3 and earlier allows SSRF.

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.01123 Published 2020-06-15 No fix listed CWE-918

TI-2018-07786 CVE-2018-10986 · GHSA-jxq6-x56f-3335

OX Guard 2.8.0 has CSRF.

LOW 38

OX Guard 2.8.0 has CSRF.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.0046 Published 2019-07-03 No fix listed CWE-352

TI-2016-05890 CVE-2016-6854 · GHSA-8f3m-v9r8-jc7p

An issue was discovered in Open-Xchange OX Guard before 2.4.2-rev5.

LOW 32

An issue was discovered in Open-Xchange OX Guard before 2.4.2-rev5.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.02441 Published 2016-12-15 No fix listed CWE-79

TI-2016-05889 CVE-2016-6853 · GHSA-6jmc-wgh2-9jr6

An issue was discovered in Open-Xchange OX Guard before 2.4.2-rev5.

LOW 32

An issue was discovered in Open-Xchange OX Guard before 2.4.2-rev5.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.02441 Published 2016-12-15 No fix listed CWE-79

TI-2016-05887 CVE-2016-6851 · GHSA-494v-jqp4-m59h

An issue was discovered in Open-Xchange OX Guard before 2.4.2-rev5.

LOW 32

An issue was discovered in Open-Xchange OX Guard before 2.4.2-rev5.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.02643 Published 2016-12-15 No fix listed CWE-79

TI-2016-03424 CVE-2016-4028 · GHSA-qxh8-75pv-8vmg

An issue was discovered in Open-Xchange OX Guard before 2.4.0-rev8.

LOW 34

An issue was discovered in Open-Xchange OX Guard before 2.4.0-rev8.

CVSS 3.0HIGH 7.5 Network Low privileges No interaction EPSS 0.00709 Published 2016-12-15 No fix listed CWE-255

TI-2015-07026 CVE-2015-8542 · GHSA-c9h2-cw5f-g747

An issue was discovered in Open-Xchange Guard before 2.2.0-rev8.

MEDIUM 42

An issue was discovered in Open-Xchange Guard before 2.2.0-rev8.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.02211 Published 2016-12-15 No fix listed CWE-320

TI-2015-06138 CVE-2015-7385 · GHSA-f3x6-vj5j-c29m

Cross-site scripting (XSS) vulnerability in Open-Xchange OX Guard before 2.0.0-rev11…

LOW 24

Cross-site scripting (XSS) vulnerability in Open-Xchange OX Guard before 2.0.0-rev11 allows remote attackers to inject arbitrary web script or HTML via the uid field in a PGP public key, which is not properly handled in…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01953 Published 2015-11-19 No fix listed CWE-79

Vulnerabilities

Filters