Product:

Open\-Xchange_appsuite

(Open\-Xchange)
Repositories

Unknown:

This might be proprietary software.
#Vulnerabilities 157
Date Id Summary Products Score Patch Annotated
2021-01-12 CVE-2021-23928 OX App Suite through 7.10.3 allows XSS via the ajax/apps/manifests query string. Open\-Xchange_appsuite 6.1
2021-01-12 CVE-2021-23929 OX App Suite through 7.10.4 allows XSS via a crafted Content-Disposition header in an uploaded HTML document to an ajax/share/<share-token>?delivery=view URI. Open\-Xchange_appsuite 6.1
2021-01-12 CVE-2021-23930 OX App Suite through 7.10.4 allows XSS via use of the conversion API for a distributedFile. Open\-Xchange_appsuite 6.1
2021-01-12 CVE-2021-23931 OX App Suite through 7.10.4 allows XSS via an inline binary file. Open\-Xchange_appsuite 6.1
2021-01-12 CVE-2021-23932 OX App Suite through 7.10.4 allows XSS via an inline image with a crafted filename. Open\-Xchange_appsuite 6.1
2021-01-12 CVE-2021-23933 OX App Suite through 7.10.4 allows XSS via JavaScript in a Note referenced by a mail:// URL. Open\-Xchange_appsuite 6.1
2021-01-12 CVE-2021-23934 OX App Suite through 7.10.4 allows XSS via a contact whose name contains JavaScript code. Open\-Xchange_appsuite 6.1
2021-01-12 CVE-2021-23935 OX App Suite through 7.10.4 allows XSS via an appointment in which the location contains JavaScript code. Open\-Xchange_appsuite 6.1
2021-01-12 CVE-2021-23936 OX App Suite through 7.10.4 allows XSS via the subject of a task. Open\-Xchange_appsuite 6.1
2021-04-30 CVE-2020-28943 OX App Suite 7.10.4 and earlier allows SSRF via a snippet. Open\-Xchange_appsuite 6.5