Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: Open-Xchange OX App Suite — documentation.open-xchange.com/appsuite/security/advisories… Clear all filters
TI-2023-13500 CVE-2023-29050 · GHSA-4p4p-22cr-2gqw

LDAP injection in Open-Xchange GmbH OX App Suite

Priority MEDIUM 45

The optional "LDAP contacts provider" could be abused by privileged users to inject LDAP filter strings that allow to access content outside of the intended hierarchy.

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.01668 Published 2024-01-08 No fix listed CWE-90
TI-2023-13498 CVE-2023-29048 · GHSA-2w87-fjj9-j39h

OS command injection in Open-Xchange GmbH OX App Suite

Priority MEDIUM 43

A component for parsing OXMF templates could be abused to execute arbitrary system commands that would be executed as the non-privileged runtime user.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0133 Published 2024-01-08 No fix listed CWE-78