PT-2019-8016 · Open Xchange Gmbh · Ox App Suite

Published 2019-05-23 · Updated 2019-05-23 · CVE-2017-15030

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Open-Xchange GmbH OX App Suite versions 7.8.4 and earlier

Description The issue is related to Cross Site Scripting (XSS), which is a type of attack that can be used to steal user data or take control of user sessions.

Recommendations For versions 7.8.4 and earlier, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2017-15030

Affected Products

Ox App Suite

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2017-15030 · Security Note
• https://osv.dev/vulnerability/CVE-2017-15030 · Vendor Advisory
• https://documentation.open-xchange.com/7.8.3/release-notes/release-notes.html · Vendor Advisory
• http://ox.com · Note
• http://open-xchange.com · Note