Shodan
Vulnerabilities
Vulnerable Software
Open-Xchange:  Security Vulnerabilities
CVE-2021-37402
OX App Suite before 7.10.3-rev32 and 7.10.4 before 7.10.4-rev18 allows XSS via binary data that is mishandled when the legacy dataretrieval endpoint has been enabled.
CVSS Score
6.1
EPSS Score
0.008
Published
2021-07-22
CVE-2021-37403
OX App Suite before 7.10.3-rev32 and 7.10.4 before 7.10.4-rev18 allows XSS via a code snippet (user-generated content) when a sharing link is created and an App Loader relative URL is used.
CVSS Score
6.1
EPSS Score
0.008
Published
2021-07-22
CVE-2020-28945
OX App Suite 7.10.4 and earlier allows XSS via crafted content to reach an undocumented feature, such as ![](http://onerror=Function.constructor, in a Notes item.
CVSS Score
6.1
EPSS Score
0.011
Published
2021-05-03
CVE-2020-28943
OX App Suite 7.10.4 and earlier allows SSRF via a snippet.
CVSS Score
6.5
EPSS Score
0.012
Published
2021-04-30
CVE-2020-28944
OX Guard 2.10.4 and earlier allows a Denial of Service via a WKS server that responds slowly or with a large amount of data.
CVSS Score
7.5
EPSS Score
0.016
Published
2021-04-30
CVE-2021-31934
OX App Suite 7.10.4 and earlier allows XSS via a crafted contact object (payload in the position or company field) that is mishandled in the App Suite UI on a smartphone.
CVSS Score
6.1
EPSS Score
0.009
Published
2021-04-30
CVE-2021-31935
OX App Suite 7.10.4 and earlier allows XSS via a crafted distribution list (payload in the common name) that is mishandled in the scheduling view.
CVSS Score
6.1
EPSS Score
0.009
Published
2021-04-30
CVE-2021-23936
OX App Suite through 7.10.4 allows XSS via the subject of a task.
CVSS Score
6.1
EPSS Score
0.009
Published
2021-01-12
CVE-2021-23927
OX App Suite through 7.10.4 allows SSRF via a URL with an @ character in an appsuite/api/oauth/proxy PUT request.
CVSS Score
6.4
EPSS Score
0.008
Published
2021-01-12
CVE-2021-23928
OX App Suite through 7.10.3 allows XSS via the ajax/apps/manifests query string.
CVSS Score
6.1
EPSS Score
0.011
Published
2021-01-12


Products
Pricing
Contact Us

Shodan ® - All rights reserved