Open Vulnerabilidad

Cronología

Escribe

Producto

Open Design Alliance Drawings SDK36
Open-Xchange OX App Suite25
Open-Xchange OX AppSuite25
Open-Xchange AppSuite23
Open Networking Foundation ONOS13

Contramedidas

Official Fix180
Temporary Fix0
Workaround1
Unavailable6
Not Defined97

Explotabilidad

High3
Functional2
Proof-of-Concept36
Unproven3
Not Defined240

Vector de acceso

Not Defined0
Physical0
Local10
Adjacent70
Network204

Autenticación

Not Defined0
High9
Low130
None145

La interacción del usuario

Not Defined0
Required77
None207

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤416
≤560
≤6101
≤744
≤836
≤918
≤109

CVSSv3 Temp

≤10
≤20
≤30
≤423
≤568
≤693
≤747
≤828
≤920
≤105

VulDB

≤10
≤20
≤37
≤433
≤574
≤687
≤730
≤838
≤96
≤109

NVD

≤10
≤20
≤30
≤41
≤57
≤616
≤731
≤828
≤98
≤1018

CNA

≤10
≤20
≤30
≤43
≤56
≤69
≤714
≤813
≤97
≤106

Proveedor

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Explotar día 0

<1k62
<2k139
<5k83
<10k0
<25k0
<50k0
<100k0
≥100k0

Explotar hoy

<1k269
<2k14
<5k1
<10k0
<25k0
<50k0
<100k0
≥100k0

Explotar el volumen del mercado

🔴 CTI Ocupaciones

Affected Products (77): App Suite (2), AppSuite (23), CDE (3), CDE Common Desktop Environment (1), Comersus BackOffice Plus (1), Comersus Backoffice Lite (4), Comersus Cart (6), Direct Connect Peer-to-peer Client (1), Drawing SDK (1), Drawings (1), Drawings Explorer (2), Drawings SDK (36), Event Post Plugin (1), IRCd (1), Ironwood.1 (2), MSS (1), Media Encoder (1), Nav2 (4), OAS (8), OAS Platform (12), ODA Drawings SDK (1), ODA Viewer (2), OMERO.server (4), OMERO.web (1), ONOS (13), OPC Systems.NET (1), OX App Suite (25), OX AppSuite (25), OX Documents (3), OX Guard (6), Open-medium Cms (1), Open-xchange Appsuite (1), OpenBlog (1), Open Classifieds (1), OpenMetadata (5), Os-sim (2), PRC SDK (4), Platform (3), Quick.Cart (5), Quick.Forum (3), Quick.cart (2), ROS2 (4), Retrofit (1), SD-RAN ONOS onos-kpimon (1), SD-RAN ONOS onos-lib-go (2), SD-RAN ONOS onos-ric-sdk-go (1), SD-RAN Rimedo rimedo-ts (2), SD-RAN onos-kpimon (1), SXF Common Library (1), Server (11), Slashcode (6), SourceForge (1), Suricata (2), Switch (7), TAO (1), Teamwork (1), UPnP Specification (1), VNCAuthProxy (1), Web Browser (1), Work Flow Engine (2), X11r6 (2), XDMoD (3), dashboard (1), edx-platform (3), hwloc (1), iew (1), journalpump (1), maintain (1), open-forms (1), openSIS Community Edition (1), opentelemetry-dotnet (1), opentelemetry-go-contrib (1), rtslib-fb (1), targetcli-fb (1), tcmu-runner (1), umoci (1), xblock-lti-consumer (1)

Link to Vendor Website: https://www.open-xchange.com/

Fecha de publicaciónBaseTempVulnerabilidadProdExpConEPSSCTICVE
2024-05-064.24.1Open-Xchange OX App Suite E-Mail PDF Export escalada de privilegiosDesconocidoNot DefinedOfficial Fix0.000000.37CVE-2024-23193
2024-05-065.45.3Open-Xchange OX App Suite E-Mail Attachment cross site scriptingDesconocidoNot DefinedOfficial Fix0.000000.26CVE-2024-23188
2024-05-065.45.3Open-Xchange OX App Suite Web Interface cross site scriptingDesconocidoNot DefinedOfficial Fix0.000000.22CVE-2024-23186
2024-05-065.45.3Open-Xchange OX App Suite Content-ID Embedding cross site scriptingDesconocidoNot DefinedOfficial Fix0.000000.22CVE-2024-23187
2024-04-305.55.5Open Networking Foundation SD-RAN Rimedo rimedo-ts reader.go uint64 desbordamiento de búferDesconocidoNot DefinedNot Defined0.000430.00CVE-2024-34050
2024-04-305.55.5Open Networking Foundation SD-RAN Rimedo rimedo-ts reader.go plmnIdString desbordamiento de búferDesconocidoNot DefinedNot Defined0.000430.04CVE-2024-34049
2024-04-305.55.5Open Networking Foundation SD-RAN ONOS onos-lib-go putBitString desbordamiento de búferDesconocidoNot DefinedNot Defined0.000430.10CVE-2023-52728
2024-04-305.55.5Open Networking Foundation SD-RAN ONOS onos-lib-go parseAlignBits desbordamiento de búferDesconocidoNot DefinedNot Defined0.000430.10CVE-2023-52727
2024-04-303.53.4Open Networking Foundation SD-RAN ONOS onos-kpimon errCh Channel Start denegación de servicioDesconocidoNot DefinedOfficial Fix0.000430.05CVE-2023-52725
2024-04-305.55.3Open Networking Foundation SD-RAN onos-kpimon processIndicationFormat1 desbordamiento de búferDesconocidoNot DefinedOfficial Fix0.000430.00CVE-2023-52724
2024-04-303.53.5Open Networking Foundation SD-RAN ONOS onos-ric-sdk-go Subscribe denegación de servicioDesconocidoNot DefinedNot Defined0.000430.05CVE-2023-52726
2024-04-133.83.7open-telemetry opentelemetry-dotnet Query String divulgación de informaciónDesconocidoNot DefinedOfficial Fix0.000450.04CVE-2024-32028
2024-04-084.84.7Open-Xchange OX App Suite Embedded Content cross site scriptingDesconocidoNot DefinedOfficial Fix0.000450.03CVE-2024-23189
2024-04-085.25.1Open-Xchange OX App Suite RSS Feed cross site scriptingDesconocidoNot DefinedOfficial Fix0.000450.04CVE-2024-23192
2024-04-084.44.4Open-Xchange OX App Suite cross site scriptingDesconocidoNot DefinedOfficial Fix0.000450.00CVE-2024-23191
2024-04-084.44.4Open-Xchange OX App Suite cross site scriptingDesconocidoNot DefinedOfficial Fix0.000450.04CVE-2024-23190
2024-04-033.83.7Open Automation Software OAS Platform OAS Engine User Configuration escalada de privilegiosAutomation SoftwareNot DefinedNot Defined0.000450.04CVE-2024-27201
2024-04-033.83.7Open Automation Software OAS Platform OAS Engine Save Security Configuration escalada de privilegiosAutomation SoftwareNot DefinedNot Defined0.000460.04CVE-2024-22178
2024-04-033.83.7Open Automation Software OAS Platform OAS Engine Tags Configuration escalada de privilegiosAutomation SoftwareNot DefinedNot Defined0.000460.04CVE-2024-21870
2024-04-034.94.8Open Automation Software OAS Platform OAS Engine File Data Source Configuration denegación de servicioAutomation SoftwareNot DefinedNot Defined0.000440.03CVE-2024-24976
2024-03-159.89.6open-metadata OpenMetadata v1 getUserPrincipal autenticación débilDesconocidoNot DefinedOfficial Fix0.000870.04CVE-2024-28255
2024-03-158.88.6open-metadata OpenMetadata validateExpression escalada de privilegiosDesconocidoNot DefinedOfficial Fix0.000450.06CVE-2024-28848
2024-03-158.88.6open-metadata OpenMetadata validateExpression escalada de privilegiosDesconocidoNot DefinedOfficial Fix0.000440.13CVE-2024-28847
2024-03-158.88.6open-metadata OpenMetadata validateExpression escalada de privilegiosDesconocidoNot DefinedOfficial Fix0.000460.14CVE-2024-28254
2024-03-158.38.2open-metadata OpenMetadata validateExpression escalada de privilegiosDesconocidoNot DefinedOfficial Fix0.000440.14CVE-2024-28253

259 no se muestran más entradas

Might our Artificial Intelligence support you?

Check our Alexa App!