Known Vulnerabilities for Open-xchange Appsuite Office by Open-xchange
Listed below are 4 of the newest known vulnerabilities associated with "Open-xchange Appsuite Office" by "Open-xchange".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2023-26442 json | In case Cacheservice was configured to use a sproxyd object-storage backend, it would follow HTTP redirects issued by that ba... | 3.2 - LOW | 2023-08-02 | 2024-01-12 |
| CVE-2023-26441 json | Cacheservice did not correctly check if relative cache object were pointing to the defined absolute location when accessing r... | 5.5 - MEDIUM | 2023-08-02 | 2024-01-12 |
| CVE-2023-26440 json | The cacheservice API could be abused to indirectly inject parameters with SQL syntax which was insufficiently sanitized and w... | 7.8 - HIGH | 2023-08-02 | 2024-01-12 |
| CVE-2023-26439 json | The cacheservice API could be abused to inject parameters with SQL syntax which was insufficiently sanitized before getting e... | 7.8 - HIGH | 2023-08-02 | 2024-01-12 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Open-xchange | Open-xchange Appsuite Office | 7.8.3 | |||
| Application | Open-xchange | Open-xchange Appsuite Office | 7.8.3 |