CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 31/08/2020 |
| CVE-2020-12644 | 보통5.0 | OX App Suite 7.10.3 and earlier allows SSRF, related to the mail account API and the /folder/list API. | 31/08/2020 |
| CVE-2020-12643 | 보통4.3 | OX App Suite 7.10.3 and earlier has Incorrect Access Control via an /api/subscriptions request for a snippet containing an email address. | 31/08/2020 |
| CVE-2020-8544 | 보통6.5 | OX App Suite through 7.10.3 allows SSRF. | 16/06/2020 |
| CVE-2020-8543 | 높음7.5 | OX App Suite through 7.10.3 has Improper Input Validation. | 16/06/2020 |
| CVE-2020-8542 | 보통5.4 | OX App Suite through 7.10.3 allows XSS. | 16/06/2020 |
| CVE-2020-8541 | 보통6.5 | OX App Suite through 7.10.3 allows XXE attacks. | 16/06/2020 |
| CVE-2020-9427 | 보통5.0 | OX Guard 2.10.3 and earlier allows SSRF. | 15/06/2020 |
| CVE-2020-9426 | 보통6.1 | OX Guard 2.10.3 and earlier allows XSS. | 15/06/2020 |
| CVE-2019-18846 | 보통5.0 | OX App Suite through 7.10.2 allows SSRF. | 21/02/2020 |
| CVE-2014-5236 | 높음7.5 | Multiple absolute path traversal vulnerabilities in documentconverter in Open-Xchange (OX) AppSuite before 7.4.2-rev10 and 7.6.x before 7.6.0-rev10 allow remote attackers to read application files via a full pathname in a crafted (1) OLE Object or (2) image in an OpenDocument text file. | 31/01/2020 |
| CVE-2014-5238 | 높음7.8 | XML external entity (XXE) vulnerability in Open-Xchange (OX) AppSuite before 7.4.2-rev11 and 7.6.x before 7.6.0-rev9 allows remote attackers to read arbitrary files and possibly other unspecified impact via a crafted OpenDocument Text document. | 14/01/2020 |
| CVE-2019-16717 | 보통6.1 | OX App Suite through 7.10.2 has XSS. | 06/01/2020 |
| CVE-2019-16716 | 보통6.6 | OX App Suite through 7.10.2 has Incorrect Access Control. | 06/01/2020 |
| CVE-2013-7486 | 보통6.1 | Cross-site scripting (XSS) vulnerability in the backend in Open-Xchange (OX) AppSuite 7.2.x before 7.2.2-rev27 and 7.4.x before 7.4.0-rev20 allows remote attackers to inject arbitrary web script or HTML via the body of an email. NOTE: this vulnerability was SPLIT from CVE-2013-6242 because it affects different sets of | 02/01/2020 |
| CVE-2013-7485 | 보통6.1 | Cross-site scripting (XSS) vulnerability in the backend in Open-Xchange (OX) AppSuite 7.2.x before 7.2.2-rev26 and 7.4.x before 7.4.0-rev16 allows remote attackers to inject arbitrary web script or HTML via the publication name, which is not properly handled in an error message. NOTE: this vulnerability was SPLIT from | 02/01/2020 |
| CVE-2013-6242 | 보통6.1 | Cross-site scripting (XSS) vulnerability in the frontend in Open-Xchange (OX) AppSuite 6.22.3 before 6.22.3-rev5 and 6.22.4 before 6.22.4-rev12 allows remote attackers to inject arbitrary web script or HTML via the subject of an email. NOTE: the vulnerabilities related to the body of the email and the publication name | 02/01/2020 |