Open-xchange Appsuite vulnerabilities
5 known vulnerabilities in Open-xchange Appsuite from Open-Xchange. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.3 High severity
OX App Suite: Improper Neutralization of Special Elements used in an SQL Command
Imageconverter API endpoints provided methods that were not sufficiently validating and sanitizing client input, allowing to inject arbitrary SQL statements. An attacker with access to the adjacent network and potentially API credentials, could read and modify
- 7.8 High severity
OX App Suite: Improper Authentication
RMI was not requiring authentication when calling ChronosRMIService:setEventOrganizer. Attackers with local or adjacent network access could abuse the RMI service to modify calendar items using RMI. RMI access is restricted to localhost by default. The interfa
- 8.8 High severity
OX App Suite: Improper Neutralization of Special Elements used in an SQL Command
Requests to fetch image metadata could be abused to include SQL queries that would be executed unchecked. Exploiting this vulnerability requires at least access to adjacent networks of the imageconverter service, which is not exposed to public networks by defa
- 8.8 High severity
OX App Suite: Improper Neutralization of Special Elements used in an SQL Command
Requests to cache an image could be abused to include SQL queries that would be executed unchecked. Exploiting this vulnerability requires at least access to adjacent networks of the imageconverter service, which is not exposed to public networks by default. A
- 8.8 High severity
OX App Suite: Improper Neutralization of Special Elements used in an SQL Command
Requests to cache an image and return its metadata could be abused to include SQL queries that would be executed unchecked. Exploiting this vulnerability requires at least access to adjacent networks of the imageconverter service, which is not exposed to publi