Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Advisory: Open-Xchange OX App Suite — documentation.open-xchange.com/appsuite/security/advisories… Clear all filters
TI-2024-15304 CVE-2024-23192 · GHSA-4r65-78q5-x99r

Cross-site scripting in Open-Xchange GmbH OX App Suite

Priority LOW 28

RSS feeds that contain malicious data- attributes could be abused to inject script code to a users browser session when reading compromised RSS feeds or successfully luring users to compromised accounts.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00531 Published 2024-04-08 No fix listed CWE-79
TI-2024-15303 CVE-2024-23191 · GHSA-85ww-p22g-3xvc

Cross-site scripting in Open-Xchange GmbH OX App Suite

Priority LOW 25

Upsell advertisement information of an account can be manipulated to execute script code in the context of the users browser session.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00499 Published 2024-04-08 No fix listed CWE-79
TI-2024-15302 CVE-2024-23190 · GHSA-qcfj-j39h-f57v

Cross-site scripting in Open-Xchange GmbH OX App Suite

Priority LOW 25

Upsell shop information of an account can be manipulated to execute script code in the context of the users browser session.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00499 Published 2024-04-08 No fix listed CWE-79
TI-2024-15301 CVE-2024-23189 · GHSA-g734-xxmw-4f5p

Cross-site scripting in Open-Xchange GmbH OX App Suite

Priority LOW 25

Embedded content references at tasks could be used to temporarily execute script code in the context of the users browser session.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00531 Published 2024-04-08 No fix listed CWE-79