Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Advisory: Open-Xchange OX App Suite — documentation.open-xchange.com/appsuite/security/advisories… Clear all filters
TI-2024-15305 CVE-2024-23193 · GHSA-rf3v-2m2g-6xwj

Information disclosure in Open-Xchange GmbH OX App Suite

Priority LOW 25

E-Mails exported as PDF were stored in a cache that did not consider specific session information for the related user account.

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00545 Published 2024-05-06 No fix listed CWE-200
TI-2024-15300 CVE-2024-23188 · GHSA-c7gh-gc4c-px6v

Cross-site scripting in Open-Xchange GmbH OX App Suite

Priority LOW 35

Maliciously crafted E-Mail attachment names could be used to temporarily execute script code in the context of the users browser session.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00526 Published 2024-05-06 No fix listed CWE-79
TI-2024-15299 CVE-2024-23187 · GHSA-2r8w-gh9h-q7vh

Cross-site scripting in Open-Xchange GmbH OX App Suite

Priority LOW 29

Content-ID based embedding of resources in E-Mails could be abused to trigger client-side script code when using the "show more" option.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00485 Published 2024-05-06 No fix listed CWE-79
TI-2024-15298 CVE-2024-23186 · GHSA-c44v-j563-f268

Cross-site scripting in Open-Xchange GmbH OX App Suite

Priority LOW 30

E-Mail containing malicious display-name information could trigger client-side script execution when using specific mobile devices.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00575 Published 2024-05-06 No fix listed CWE-79