| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2016-6853 | 4.3 | An issue was discovered in Open-Xchange OX Guard before 2.4.2-rev5. Script code and references to external websites can be injected to the names of PGP public keys. When requesting that key later on using a specific URL, such script code might get ex | 2018-10-19 15:46:00 | 2016-12-15 06:59:00 |
| CVE-2016-6851 | 4.3 | An issue was discovered in Open-Xchange OX Guard before 2.4.2-rev5. Script code can be provided as parameter to the OX Guard guest reader web application. This allows cross-site scripting attacks against arbitrary users since no prior authentication | 2018-10-19 15:46:00 | 2016-12-15 06:59:00 |
| CVE-2016-5740 | 4.3 | An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev5. JavaScript code can be used as part of ical attachments within scheduling E-Mails. This content, for example an appointment's location, will be presented to the user at the E-Mai | 2018-10-19 15:46:00 | 2016-12-15 06:59:00 |
| CVE-2016-5124 | 4.3 | An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev14. Adding images from external sources to HTML editors by drag&drop can potentially lead to script code execution in the context of the active user. To exploit this, a user needs t | 2018-10-19 15:46:00 | 2016-12-15 06:59:00 |
| CVE-2016-4048 | 4.3 | An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev11. Custom messages can be shown at the login screen to notify external users about issues with sharing links. This mechanism can be abused to inject arbitrary text messages. Users | 2018-10-19 15:46:00 | 2016-12-15 06:59:00 |
| CVE-2016-4047 | 4.0 | An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev8. References to external Open XML document type definitions (.dtd resources) can be placed within .docx and .xslx files. Those resources were requested when parsing certain parts o | 2018-10-19 15:46:00 | 2016-12-15 06:59:00 |
| CVE-2016-4046 | 5.0 | An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev11. The API to configure external mail accounts can be abused to map and access network components within the trust boundary of the operator. Users can inject arbitrary hosts and po | 2018-10-19 15:46:00 | 2016-12-15 06:59:00 |
| CVE-2016-4045 | 4.3 | An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev11. Script code can be embedded to RSS feeds using a URL notation. In case a user clicks the corresponding link at the RSS reader of App Suite, code gets executed at the context of | 2018-10-19 15:46:00 | 2016-12-15 06:59:00 |
| CVE-2016-4028 | 3.5 | An issue was discovered in Open-Xchange OX Guard before 2.4.0-rev8. OX Guard uses an authentication token to identify and transfer guest users' credentials. The OX Guard API acts as a padding oracle by responding with different error codes depending | 2018-10-19 15:46:00 | 2016-12-15 06:59:00 |
| CVE-2016-4027 | 3.5 | An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev10. App Suite frontend offers to control whether a user wants to store cookies that exceed the session duration. This functionality is useful when logging in from clients with reduc | 2018-10-19 15:46:00 | 2016-12-15 06:59:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: