Ox App Suite

ox_app_suite

Vendor: Open Xchange • 48 CVEs

CVEs (48)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-33495 1Open Xchange 1Ox App Suite Jun 17, 2026 Nov 22, 2021 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 OX App Suite 7.10.5 allows XSS via an OX Chat system message.
CVE-2021-33494 1Open Xchange 1Ox App Suite Jun 17, 2026 Nov 22, 2021 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 OX App Suite 7.10.5 allows XSS via an OX Chat room title during typing rendering.
CVE-2021-33493 1Open Xchange 1Ox App Suite Jun 17, 2026 Nov 22, 2021 N/A· v4 6.0 MEDIUM· v3 3.6 LOW· v2 The middleware component in OX App Suite through 7.10.5 allows Code Injection via Java classes in a YAML format.
CVE-2021-33492 1Open Xchange 1Ox App Suite Jun 17, 2026 Nov 22, 2021 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 OX App Suite 7.10.5 allows XSS via an OX Chat room name.
CVE-2021-33491 1Open Xchange 1Ox App Suite Jun 17, 2026 Nov 22, 2021 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 OX App Suite through 7.10.5 allows Directory Traversal via ../ in an OOXML or ODF ZIP archive, because of the mishandling of relative paths in mail addresses in conjunction with auto-configuration DNS records.
CVE-2021-33490 1Open Xchange 1Ox App Suite Jun 17, 2026 Nov 22, 2021 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 OX App Suite through 7.10.5 allows XSS via a crafted snippet in a shared mail signature.
CVE-2021-33489 1Open Xchange 1Ox App Suite Jun 17, 2026 Nov 22, 2021 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 OX App Suite through 7.10.5 allows XSS via JavaScript code in a shared XCF file.
CVE-2021-33488 1Open Xchange 1Ox App Suite Jun 17, 2026 Nov 22, 2021 N/A· v4 6.1 MEDIUM· v3 5.8 MEDIUM· v2 chat in OX App Suite 7.10.5 has Improper Input Validation. A user can be redirected to a rogue OX Chat server via a development-related hook.

Previous 1 23