Approved changes feed: RSS · Atom
cpe:2.3:a:open-xchange:ox_guard:*:rev4:*:*:*:*:*:*
part: a version: * update: rev4
| Vendor | Open Xchange (85b486f1-55be-55d2-8b83-a25950d10c23) |
|---|---|
| Product | Ox Guard (3b6b9bc2-7649-58d7-be7a-5f1d48d71b0b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2016-6854 |
vulnerable | 2026-06-03 14:36:06.344788 |
Details available
An issue was discovered in Open-Xchange OX Guard before 2.4.2-rev5. Script code which got injected to a mail with inline PGP signature gets executed when verifying the signature. Malicious script code can be executed within a user's context. This can lead to session hijacking or triggering unwanted actions via the web interface (sending mail, deleting data etc.).
Published: 2016-12-15T06:31:00.000Z
Updated: 2024-08-06T01:43:38.589Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-6853 |
vulnerable | 2026-06-03 14:36:06.344439 |
Details available
An issue was discovered in Open-Xchange OX Guard before 2.4.2-rev5. Script code and references to external websites can be injected to the names of PGP public keys. When requesting that key later on using a specific URL, such script code might get executed. In case of injecting external websites, users might get lured into a phishing scheme. Malicious script code can be executed within a user's context. This can lead to session hijacking or triggering unwanted actions via the web interface (sending mail, deleting data etc.).
Published: 2016-12-15T06:31:00.000Z
Updated: 2024-08-06T01:43:38.457Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-6851 |
vulnerable | 2026-06-03 14:36:06.343642 |
Details available
An issue was discovered in Open-Xchange OX Guard before 2.4.2-rev5. Script code can be provided as parameter to the OX Guard guest reader web application. This allows cross-site scripting attacks against arbitrary users since no prior authentication is needed. Malicious script code can be executed within a user's context. This can lead to session hijacking or triggering unwanted actions via the web interface (sending mail, deleting data etc.) in case the user has an active session on the same domain already.
Published: 2016-12-15T06:31:00.000Z
Updated: 2024-08-06T01:43:37.806Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.