Open-Xchange AppSuite versions 7.4.2 and below suffer from multiple password disclosure and cross site scripting vulnerabilities.
348cc4505b3feff5407c50da62d97a957b38975a969613b4950953a41d048bcb
Open-Xchange AppSuite versions 7.4.1 and 7.4.2 suffer from a cross site scripting vulnerability.
fa92825ba91c0472654c533544c6b2eb942b65f4321430779dddde151bb3a5a1
Open-Xchange AppSuite version 7.4.1 fails to properly neutralize javascript inserted at the header of an SVG image file.
902503927eb1161ffb0b2ded9523ac54b5ca2dc0ca6eb132a17f1234f1998415
Open-Xchange AppSuite versions 7.4.1 and below suffer from script insertion and traversal vulnerabilities.
f64894541784a5965d5e8dd55defafbccab9ab8f246cce119db4b1e2c9d56811
Open-Xchange AppSuite versions 7.4.0 and below suffer from script insertion vulnerabilities.
dbc4c1995cb822c7610a9c9e1ecd9db78466216fdd80599d38483517d0e1dfff
Open-Xchange frontend6 and backend components suffer from cross site scripting vulnerabilities.
2ba2cbc9a883832dff4e72cc423bdd151e4c15a2909a181acd3f69ebb3b75e51
Open-Xchange AppSuite versions prior to 7.4.0 fail to properly neutralize script code embedded within SVG files and also suffer from an information exposure vulnerability.
39e0180e7166549e3f32416ad6dcba8d15a526692b1b27889998d45ebd1eefe2
Open-Xchange AppSuite versions prior to 7.2.2 suffer from multiple script insertion vulnerabilities.
2aba5dc117224326084b059611da7da81490ea0864a710e358a670e17e8c5326
Open-Xchange AppSuite versions 7.0.0 through 7.2.2 suffer from configuration issues, improper authentication, and information exposure vulnerabilities.
393084afb3f746ac92087e7fb8bea6c43ddf19add07b5f609d261fad8e20ab06
Open-Xchange AppSuite version 7.2.2 suffers from a race condition vulnerability.
29dc634c735488b15be5d3c5505557afe8bba7b4881bed94b6d11caad980cbda
Open-Xchange AppSuite versions 7.2.2 and below suffer from phishing and data injection vulnerabilities.
27b6927eddb258978d90051d0b1651046597ac49ff00741bc39f4c2130f9a7d4
Multiple cross site scripting vulnerabilities have been addressed in Open-Xchange Server 6.
38f5d840701796b2a31696211c071436c988be8266dff7c81100c20207b476a2
Multiple security issues for Open-Xchange Server 6 and OX AppSuite have been discovered and fixed. These range from cross site scripting to header injection.
e2706921a9718e5f1888014c099073f64e4fae60be06edb06264c9b991a2542e
Open-Xchange version 6 suffers from cross site scripting, local file inclusion, HTTP header injection / response splitting, missing SSL enforcement, server-side request forging, insecure password hashing, and file permission vulnerabilities.
8be9974c5b91f42a1ca77eb417301430aea4147dc0179c425ee43fbe9ef5c36e