PT-2019-8016 · Open Xchange Gmbh · Ox App Suite

Publicado 2019-05-23 · Atualizado 2019-05-23 · CVE-2017-15030

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Open-Xchange GmbH OX App Suite versions 7.8.4 and earlier

Description The issue is related to Cross Site Scripting (XSS), which is a type of attack that can be used to steal user data or take control of user sessions.

Recommendations For versions 7.8.4 and earlier, at the moment, there is no information about a newer version that contains a fix for this issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2017-15030

Produtos afetados

Ox App Suite

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2017-15030 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-15030 · Aviso do Fabricante
• http://ox.com · Nota
• http://open-xchange.com · Nota
• https://documentation.open-xchange.com/7.8.3/release-notes/release-notes.html · Aviso do Fabricante