Known vulnerabilities in Open-Xchange App Suite
Vendor:
Open-Xchange Inc
Software:
Open-Xchange App Suite
Software CPE:
cpe:2.3:a:open-xchange:open-xchange_app_suite:*:*:*:*:*:*:*:*
Website:
https://www.open-xchange.com
Total vulnerabilities:
7
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
7.7
Breakdown by Severity Chart
Vulnerabilities (7)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU65792 - Server-Side Request Forgery (SSRF) CVE-2022-24406 |
CWE-918 | Medium | 7.8.4-rev10, 7.10.3-rev5, 7.10.4-rev6, 7.10.5-rev6, 7.10.6-rev3 | 26.07.2022 |
SB2022072624 |
||
| #VU65791 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-24405 |
CWE-78 | Low | 7.8.4-rev14, 7.10.3-rev7, 7.10.4-rev7, 7.10.5-rev6, 7.10.6-rev3 | 26.07.2022 |
SB2022072623 |
||
| #VU65789 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-23100 |
CWE-78 | Medium | 7.8.4-rev13, 7.10.3-rev6, 7.10.4-rev6, 7.10.5-rev5, 7.10.6-rev3 | 26.07.2022 |
SB2022072621 |
||
| #VU65788 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-23099 |
CWE-79 | Low | 7.8.4-rev78, 7.10.3-rev38, 7.10.4-rev31, 7.10.5-rev37, 7.10.6-rev9 | 26.07.2022 |
SB2022072622 |
||
| #VU65787 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-23101 |
CWE-79 | Low | 7.8.4-rev13, 7.10.3-rev6, 7.10.4-rev6, 7.10.5-rev5, 7.10.6-rev3 | 26.07.2022 |
SB2022072621 |
||
| #VU13546 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2018-9998 |
CWE-611 | Low | 7.6.3-rev37, 7.8.2-rev40, 7.8.3-rev48, 7.8.4-rev28 | 03.07.2018 |
SB2018070303 |
||
| #VU13545 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2018-9997 |
CWE-79 | Low | 7.6.3-rev37, 7.8.2-rev40, 7.8.3-rev48, 7.8.4-rev28 | 03.07.2018 |
SB2018070303 |