Known Vulnerabilities for Open-xchange Appsuite Office by Open-xchange
Listed below are 4 of the newest known vulnerabilities associated with "Open-xchange Appsuite Office" by "Open-xchange".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2023-26442 | In case Cacheservice was configured to use a sproxyd object-storage backend, it would follow HTTP redirects issued by that ba... | 3.2 - LOW | 2023-08-02 | 2024-01-12 |
| CVE-2023-26441 | Cacheservice did not correctly check if relative cache object were pointing to the defined absolute location when accessing r... | 5.5 - MEDIUM | 2023-08-02 | 2024-01-12 |
| CVE-2023-26440 | The cacheservice API could be abused to indirectly inject parameters with SQL syntax which was insufficiently sanitized and w... | 7.8 - HIGH | 2023-08-02 | 2024-01-12 |
| CVE-2023-26439 | The cacheservice API could be abused to inject parameters with SQL syntax which was insufficiently sanitized before getting e... | 7.8 - HIGH | 2023-08-02 | 2024-01-12 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Open-xchange | Open-xchange Appsuite Office | 7.8.3 | |||
| Application | Open-xchange | Open-xchange Appsuite Office | 7.8.3 |