Ox Software Sårbarheter

Tidslinje

Typ

Produkt

OX Software OX App Suite125
OX Software OX Documents4
OX Software App Suite4
OX Software Open-Xchange3
OX Software OX Guard1

Åtgärd

Official Fix52
Temporary Fix0
Workaround0
Unavailable0
Not Defined82

Utnyttjbarhet

High0
Functional0
Proof-of-Concept8
Unproven0
Not Defined126

Åtkomstvektor

Not Defined0
Physical8
Local5
Adjacent21
Network100

Autentisering

Not Defined0
High5
Low92
None37

Användarinteraktion

Not Defined0
Required67
None67

C3BM Index

CVSSv3 Base

≤10
≤20
≤31
≤426
≤556
≤629
≤715
≤82
≤95
≤100

CVSSv3 Temp

≤10
≤20
≤31
≤431
≤553
≤630
≤712
≤82
≤95
≤100

VulDB

≤10
≤21
≤33
≤460
≤534
≤621
≤78
≤87
≤90
≤100

NVD

≤10
≤20
≤30
≤41
≤516
≤616
≤736
≤87
≤93
≤109

CNA

≤10
≤20
≤30
≤44
≤57
≤613
≤72
≤87
≤90
≤100

Säljare

≤10
≤20
≤30
≤40
≤52
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤41
≤50
≤60
≤70
≤80
≤90
≤100

Utnyttja 0-dagars

<1k60
<2k64
<5k10
<10k0
<25k0
<50k0
<100k0
≥100k0

Utnyttja idag

<1k130
<2k4
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Utnyttja marknadsvolymen

🔴 CTI Aktiviteter

Affected Products (6): App Suite (4), OX App Suite (125), OX Documents (4), OX Guard (1), Open-Xchange (3), Scripting (1)

PubliceradBaseTempSårbarhetProdUtnRemEPSSCTICVE
02/11/20235.25.2OX Software OX App Suite Presentation cross site scriptingOkändNot DefinedNot Defined0.000460.03CVE-2023-29043
02/11/20236.96.9OX Software OX App Suite Image Metadata sql injektionOkändNot DefinedNot Defined0.000530.00CVE-2023-26454
02/11/20235.95.9OX Software OX App Suite Image Cache sql injektionOkändNot DefinedNot Defined0.000530.00CVE-2023-26452
02/11/20234.44.4OX Software OX App Suite Drawing cross site scriptingOkändNot DefinedNot Defined0.000490.00CVE-2023-29045
02/11/20234.44.4OX Software OX App Suite Document cross site scriptingOkändNot DefinedNot Defined0.000490.00CVE-2023-29044
02/11/20234.34.3OX Software OX App Suite Network Connection förnekande av tjänstenOkändNot DefinedNot Defined0.000440.00CVE-2023-29046
02/11/20234.44.4OX Software OX App Suite OX Guard cross site scriptingOkändNot DefinedNot Defined0.000490.00CVE-2023-26456
02/11/20235.95.9OX Software OX App Suite RMI ChronosRMIService:setEventOrganizer. svag autentiseringOkändNot DefinedNot Defined0.000420.00CVE-2023-26455
02/11/20236.96.9OX Software OX App Suite Local Privilege EscalationOkändNot DefinedNot Defined0.000530.00CVE-2023-26453
02/11/20235.65.6OX Software OX App Suite Imageconverter API sql injektionOkändNot DefinedNot Defined0.000430.00CVE-2023-29047
02/08/20232.82.8OX Software OX App Suite Cache Service privilegier eskaleringOkändNot DefinedOfficial Fix0.000630.02CVE-2023-26442
02/08/20236.36.2OX Software OX App Suite Cache Service API sql injektionOkändNot DefinedOfficial Fix0.000420.00CVE-2023-26440
02/08/20233.63.6OX Software OX App Suite Control Character privilegier eskaleringOkändNot DefinedOfficial Fix0.000740.00CVE-2023-26430
02/08/20236.66.5OX Software OX App Suite Cache Service API sql injektionOkändNot DefinedOfficial Fix0.000420.00CVE-2023-26439
02/08/20235.05.0OX Software OX App Suite Cache Service kataloggenomgångOkändNot DefinedOfficial Fix0.000450.00CVE-2023-26441
02/08/20234.44.4OX Software OX App Suite Web Interface cross site scriptingOkändNot DefinedOfficial Fix0.000650.00CVE-2023-26447
02/08/20234.44.4OX Software OX App Suite Web Interface cross site scriptingOkändNot DefinedOfficial Fix0.000650.00CVE-2023-26448
02/08/20234.44.4OX Software OX App Suite Web Interface cross site scriptingOkändNot DefinedOfficial Fix0.000650.00CVE-2023-26446
02/08/20236.76.6OX Software OX App Suite Autocomplete Search sql injektionOkändNot DefinedOfficial Fix0.001240.00CVE-2023-26443
02/08/20236.46.3OX Software OX App Suite svag krypteringOkändNot DefinedOfficial Fix0.000900.00CVE-2023-26451
02/08/20234.84.7OX Software OX App Suite Frontend Theme cross site scriptingOkändNot DefinedOfficial Fix0.000650.04CVE-2023-26445
02/08/20234.34.2OX Software OX App Suite JDK DNS Cache privilegier eskaleringOkändNot DefinedOfficial Fix0.000750.00CVE-2023-26438
02/08/20234.44.4OX Software OX App Suite Count Web Service cross site scriptingOkändNot DefinedOfficial Fix0.000730.00CVE-2023-26450
02/08/20234.44.4OX Software OX App Suite Chat Web Service cross site scriptingOkändNot DefinedOfficial Fix0.000730.00CVE-2023-26449
20/06/20236.76.7OX Software OX App Suite API Endpoint documentconverterws privilegier eskaleringOkändNot DefinedNot Defined0.000570.04CVE-2023-26436

109 fler poster visas inte

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!