Open-Xchange AppSuite 7.10.5 Patch Release 5973
Approved changes feed: RSS · Atom
cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_5973:*:*:*:*:*:*
part: a version: 7.10.5 update: patch_release_5973
| Vendor | Open Xchange (85b486f1-55be-55d2-8b83-a25950d10c23) |
|---|---|
| Product | Open Xchange Appsuite (5c4f7579-8692-5eac-881b-9aff46aef717) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:open-xchange.com/appsuite |
purl2cpe | 2026-06-01 10:16:43.940774 |
pkg:rpm/opensuse/open-xchange-appsuite |
purl2cpe | 2026-06-01 10:16:43.940775 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-37313 |
vulnerable | 2026-06-08 05:47:12.081080 |
Details available
OX App Suite through 7.10.6 allows SSRF because the anti-SSRF protection mechanism only checks the first DNS AA or AAAA record.
Published: 2022-12-26T00:00:00.000Z
Updated: 2025-04-14T14:33:40.561Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-37312 |
vulnerable | 2026-06-08 05:47:12.076889 |
Details available
OX App Suite through 7.10.6 has Uncontrolled Resource Consumption via a large request body containing a redirect URL to the deferrer servlet.
Published: 2022-12-26T00:00:00.000Z
Updated: 2025-04-14T14:35:39.930Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-37311 |
vulnerable | 2026-06-08 05:47:12.072205 |
Details available
OX App Suite through 7.10.6 has Uncontrolled Resource Consumption via a large location request parameter to the redirect servlet.
Published: 2022-12-26T00:00:00.000Z
Updated: 2025-04-14T14:36:38.009Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-37310 |
vulnerable | 2026-06-08 05:47:12.067566 |
Details available
OX App Suite through 7.10.6 allows XSS via a malicious capability to the metrics or help module, as demonstrated by a /#!!&app=io.ox/files&cap= URI.
Published: 2022-12-26T00:00:00.000Z
Updated: 2025-04-14T14:38:35.949Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-37309 |
vulnerable | 2026-06-08 05:47:12.058458 |
Details available
OX App Suite through 7.10.6 allows XSS via script code within a contact that has an e-mail address but lacks a name.
Published: 2022-12-26T00:00:00.000Z
Updated: 2025-04-14T14:42:07.163Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-37308 |
vulnerable | 2026-06-08 05:47:12.053616 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-37307 |
vulnerable | 2026-06-08 05:47:12.015512 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31469 |
vulnerable | 2026-06-08 05:43:40.802267 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29853 |
vulnerable | 2026-06-08 05:42:49.155648 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29852 |
vulnerable | 2026-06-08 05:42:49.123945 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.