Open-Xchange AppSuite 7.10.5 Patch Release 6111
Approved changes feed: RSS · Atom
cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6111:*:*:*:*:*:*
part: a version: 7.10.5 update: patch_release_6111
| Vendor | Open Xchange (85b486f1-55be-55d2-8b83-a25950d10c23) |
|---|---|
| Product | Open Xchange Appsuite (5c4f7579-8692-5eac-881b-9aff46aef717) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:open-xchange.com/appsuite |
purl2cpe | 2026-06-01 10:16:43.940856 |
pkg:rpm/opensuse/open-xchange-appsuite |
purl2cpe | 2026-06-01 10:16:43.940857 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-37313 |
vulnerable | 2026-06-08 05:47:12.082703 |
Details available
OX App Suite through 7.10.6 allows SSRF because the anti-SSRF protection mechanism only checks the first DNS AA or AAAA record.
Published: 2022-12-26T00:00:00.000Z
Updated: 2025-04-14T14:33:40.561Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-37312 |
vulnerable | 2026-06-08 05:47:12.078821 |
Details available
OX App Suite through 7.10.6 has Uncontrolled Resource Consumption via a large request body containing a redirect URL to the deferrer servlet.
Published: 2022-12-26T00:00:00.000Z
Updated: 2025-04-14T14:35:39.930Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-37311 |
vulnerable | 2026-06-08 05:47:12.074227 |
Details available
OX App Suite through 7.10.6 has Uncontrolled Resource Consumption via a large location request parameter to the redirect servlet.
Published: 2022-12-26T00:00:00.000Z
Updated: 2025-04-14T14:36:38.009Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-37310 |
vulnerable | 2026-06-08 05:47:12.070062 |
Details available
OX App Suite through 7.10.6 allows XSS via a malicious capability to the metrics or help module, as demonstrated by a /#!!&app=io.ox/files&cap= URI.
Published: 2022-12-26T00:00:00.000Z
Updated: 2025-04-14T14:38:35.949Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-37309 |
vulnerable | 2026-06-08 05:47:12.060714 |
Details available
OX App Suite through 7.10.6 allows XSS via script code within a contact that has an e-mail address but lacks a name.
Published: 2022-12-26T00:00:00.000Z
Updated: 2025-04-14T14:42:07.163Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-37308 |
vulnerable | 2026-06-08 05:47:12.055870 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-37307 |
vulnerable | 2026-06-08 05:47:12.037030 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31469 |
vulnerable | 2026-06-08 05:43:40.818833 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29853 |
vulnerable | 2026-06-08 05:42:49.156584 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29852 |
vulnerable | 2026-06-08 05:42:49.147891 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.