Ox Software 漏洞

时间轴

类型

产品

OX Software OX App Suite125
OX Software OX Documents4
OX Software App Suite4
OX Software Open-Xchange3
OX Software OX Guard1

修正

Official Fix52
Temporary Fix0
Workaround0
Unavailable0
Not Defined82

易受攻击性

High0
Functional0
Proof-of-Concept8
Unproven0
Not Defined126

访问向量

Not Defined0
Physical8
Local5
Adjacent21
Network100

身份验证

Not Defined0
High5
Low92
None37

用户交互

Not Defined0
Required67
None67

C3BM Index

CVSSv3 Base

≤10
≤20
≤31
≤426
≤556
≤629
≤715
≤82
≤95
≤100

CVSSv3 Temp

≤10
≤20
≤31
≤431
≤553
≤630
≤712
≤82
≤95
≤100

VulDB

≤10
≤21
≤33
≤460
≤534
≤621
≤78
≤87
≤90
≤100

NVD

≤10
≤20
≤30
≤41
≤516
≤616
≤736
≤87
≤93
≤109

CNA

≤10
≤20
≤30
≤44
≤57
≤613
≤72
≤87
≤90
≤100

供应商

≤10
≤20
≤30
≤40
≤52
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤41
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k60
<2k64
<5k10
<10k0
<25k0
<50k0
<100k0
≥100k0

本日攻击

<1k130
<2k4
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

攻击市场容量

🔴 CTI 活动

Affected Products (6): App Suite (4), OX App Suite (125), OX Documents (4), OX Guard (1), Open-Xchange (3), Scripting (1)

已发布BaseTemp漏洞Prod修正EPSSCTICVE
2023-11-025.25.2OX Software OX App Suite Presentation 跨网站脚本未知Not DefinedNot Defined0.000460.03CVE-2023-29043
2023-11-026.96.9OX Software OX App Suite Image Metadata SQL注入未知Not DefinedNot Defined0.000530.00CVE-2023-26454
2023-11-025.95.9OX Software OX App Suite Image Cache SQL注入未知Not DefinedNot Defined0.000530.00CVE-2023-26452
2023-11-024.44.4OX Software OX App Suite Drawing 跨网站脚本未知Not DefinedNot Defined0.000490.00CVE-2023-29045
2023-11-024.44.4OX Software OX App Suite Document 跨网站脚本未知Not DefinedNot Defined0.000490.00CVE-2023-29044
2023-11-024.34.3OX Software OX App Suite Network Connection 拒绝服务未知Not DefinedNot Defined0.000440.00CVE-2023-29046
2023-11-024.44.4OX Software OX App Suite OX Guard 跨网站脚本未知Not DefinedNot Defined0.000490.00CVE-2023-26456
2023-11-025.95.9OX Software OX App Suite RMI ChronosRMIService:setEventOrganizer. 弱身份验证未知Not DefinedNot Defined0.000420.00CVE-2023-26455
2023-11-026.96.9OX Software OX App Suite Local Privilege Escalation未知Not DefinedNot Defined0.000530.00CVE-2023-26453
2023-11-025.65.6OX Software OX App Suite Imageconverter API SQL注入未知Not DefinedNot Defined0.000430.00CVE-2023-29047
2023-08-022.82.8OX Software OX App Suite Cache Service 权限升级未知Not DefinedOfficial Fix0.000630.02CVE-2023-26442
2023-08-026.36.2OX Software OX App Suite Cache Service API SQL注入未知Not DefinedOfficial Fix0.000420.00CVE-2023-26440
2023-08-023.63.6OX Software OX App Suite Control Character 权限升级未知Not DefinedOfficial Fix0.000740.00CVE-2023-26430
2023-08-026.66.5OX Software OX App Suite Cache Service API SQL注入未知Not DefinedOfficial Fix0.000420.00CVE-2023-26439
2023-08-025.05.0OX Software OX App Suite Cache Service 目录遍历未知Not DefinedOfficial Fix0.000450.00CVE-2023-26441
2023-08-024.44.4OX Software OX App Suite Web Interface 跨网站脚本未知Not DefinedOfficial Fix0.000650.00CVE-2023-26447
2023-08-024.44.4OX Software OX App Suite Web Interface 跨网站脚本未知Not DefinedOfficial Fix0.000650.00CVE-2023-26448
2023-08-024.44.4OX Software OX App Suite Web Interface 跨网站脚本未知Not DefinedOfficial Fix0.000650.00CVE-2023-26446
2023-08-026.76.6OX Software OX App Suite Autocomplete Search SQL注入未知Not DefinedOfficial Fix0.001240.00CVE-2023-26443
2023-08-026.46.3OX Software OX App Suite 弱加密未知Not DefinedOfficial Fix0.000900.00CVE-2023-26451
2023-08-024.84.7OX Software OX App Suite Frontend Theme 跨网站脚本未知Not DefinedOfficial Fix0.000650.04CVE-2023-26445
2023-08-024.34.2OX Software OX App Suite JDK DNS Cache 权限升级未知Not DefinedOfficial Fix0.000750.00CVE-2023-26438
2023-08-024.44.4OX Software OX App Suite Count Web Service 跨网站脚本未知Not DefinedOfficial Fix0.000730.05CVE-2023-26450
2023-08-024.44.4OX Software OX App Suite Chat Web Service 跨网站脚本未知Not DefinedOfficial Fix0.000730.00CVE-2023-26449
2023-06-206.76.7OX Software OX App Suite API Endpoint documentconverterws 权限升级未知Not DefinedNot Defined0.000570.04CVE-2023-26436

109 更多条目未显示

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!