Ox Software Luki w zabezpieczeniach

Oś czasu

Rodzaj

Produkt

OX Software OX App Suite125
OX Software OX Documents4
OX Software App Suite4
OX Software Open-Xchange3
OX Software OX Guard1

Przeciwdziałanie

Official Fix52
Temporary Fix0
Workaround0
Unavailable0
Not Defined82

Wykorzystywanie

High0
Functional0
Proof-of-Concept8
Unproven0
Not Defined126

Wektor dostępu

Not Defined0
Physical8
Local5
Adjacent21
Network100

Uwierzytelnianie

Not Defined0
High5
Low92
None37

Interakcja z użytkownikiem

Not Defined0
Required67
None67

C3BM Index

CVSSv3 Base

≤10
≤20
≤31
≤426
≤556
≤629
≤715
≤82
≤95
≤100

CVSSv3 Temp

≤10
≤20
≤31
≤431
≤553
≤630
≤712
≤82
≤95
≤100

VulDB

≤10
≤21
≤33
≤460
≤534
≤621
≤78
≤87
≤90
≤100

NVD

≤10
≤20
≤30
≤41
≤516
≤616
≤736
≤87
≤93
≤109

CNA

≤10
≤20
≤30
≤44
≤57
≤613
≤72
≤87
≤90
≤100

Sprzedawca

≤10
≤20
≤30
≤40
≤52
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤41
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k60
<2k64
<5k10
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj dzisiaj

<1k134
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj wielkość rynku

🔴 CTI Zajęcia

Affected Products (6): App Suite (4), OX App Suite (125), OX Documents (4), OX Guard (1), Open-Xchange (3), Scripting (1)

OpublikowanoBaseTempSłaby punktProdWykPrzEPSSCTICVE
2023-11-025.25.2OX Software OX App Suite Presentation cross site scriptingNieznanyNot DefinedNot Defined0.000460.03CVE-2023-29043
2023-11-026.96.9OX Software OX App Suite Image Metadata sql injectionNieznanyNot DefinedNot Defined0.000530.00CVE-2023-26454
2023-11-025.95.9OX Software OX App Suite Image Cache sql injectionNieznanyNot DefinedNot Defined0.000530.00CVE-2023-26452
2023-11-024.44.4OX Software OX App Suite Drawing cross site scriptingNieznanyNot DefinedNot Defined0.000490.00CVE-2023-29045
2023-11-024.44.4OX Software OX App Suite Document cross site scriptingNieznanyNot DefinedNot Defined0.000490.00CVE-2023-29044
2023-11-024.34.3OX Software OX App Suite Network Connection denial of serviceNieznanyNot DefinedNot Defined0.000440.00CVE-2023-29046
2023-11-024.44.4OX Software OX App Suite OX Guard cross site scriptingNieznanyNot DefinedNot Defined0.000490.00CVE-2023-26456
2023-11-025.95.9OX Software OX App Suite RMI ChronosRMIService:setEventOrganizer. weak authenticationNieznanyNot DefinedNot Defined0.000420.00CVE-2023-26455
2023-11-026.96.9OX Software OX App Suite Local Privilege EscalationNieznanyNot DefinedNot Defined0.000530.00CVE-2023-26453
2023-11-025.65.6OX Software OX App Suite Imageconverter API sql injectionNieznanyNot DefinedNot Defined0.000430.00CVE-2023-29047
2023-08-022.82.8OX Software OX App Suite Cache Service privilege escalationNieznanyNot DefinedOfficial Fix0.000630.02CVE-2023-26442
2023-08-026.36.2OX Software OX App Suite Cache Service API sql injectionNieznanyNot DefinedOfficial Fix0.000420.00CVE-2023-26440
2023-08-023.63.6OX Software OX App Suite Control Character privilege escalationNieznanyNot DefinedOfficial Fix0.000740.00CVE-2023-26430
2023-08-026.66.5OX Software OX App Suite Cache Service API sql injectionNieznanyNot DefinedOfficial Fix0.000420.00CVE-2023-26439
2023-08-025.05.0OX Software OX App Suite Cache Service directory traversalNieznanyNot DefinedOfficial Fix0.000450.00CVE-2023-26441
2023-08-024.44.4OX Software OX App Suite Web Interface cross site scriptingNieznanyNot DefinedOfficial Fix0.000650.00CVE-2023-26447
2023-08-024.44.4OX Software OX App Suite Web Interface cross site scriptingNieznanyNot DefinedOfficial Fix0.000650.00CVE-2023-26448
2023-08-024.44.4OX Software OX App Suite Web Interface cross site scriptingNieznanyNot DefinedOfficial Fix0.000650.00CVE-2023-26446
2023-08-026.76.6OX Software OX App Suite Autocomplete Search sql injectionNieznanyNot DefinedOfficial Fix0.001240.00CVE-2023-26443
2023-08-026.46.3OX Software OX App Suite weak encryptionNieznanyNot DefinedOfficial Fix0.000900.00CVE-2023-26451
2023-08-024.84.7OX Software OX App Suite Frontend Theme cross site scriptingNieznanyNot DefinedOfficial Fix0.000650.00CVE-2023-26445
2023-08-024.34.2OX Software OX App Suite JDK DNS Cache privilege escalationNieznanyNot DefinedOfficial Fix0.000750.00CVE-2023-26438
2023-08-024.44.4OX Software OX App Suite Count Web Service cross site scriptingNieznanyNot DefinedOfficial Fix0.000730.00CVE-2023-26450
2023-08-024.44.4OX Software OX App Suite Chat Web Service cross site scriptingNieznanyNot DefinedOfficial Fix0.000730.00CVE-2023-26449
2023-06-206.76.7OX Software OX App Suite API Endpoint documentconverterws privilege escalationNieznanyNot DefinedNot Defined0.000570.04CVE-2023-26436

109 więcej wpisów nie jest pokazywanych

Want to stay up to date on a daily basis?

Enable the mail alert feature now!