GCVE - cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.2:*:*:*:*:*:*:*

part: a version: 7.10.2 update: *

Vendor	Open Xchange (`85b486f1-55be-55d2-8b83-a25950d10c23`)
Product	Open Xchange Appsuite (`5c4f7579-8692-5eac-881b-9aff46aef717`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:open-xchange.com/appsuite`	purl2cpe	2026-06-01 10:16:43.940476
`pkg:rpm/opensuse/open-xchange-appsuite`	purl2cpe	2026-06-01 10:16:43.940478

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2020-8544`	vulnerable	2026-06-03 14:43:09.619656	Details available OX App Suite through 7.10.3 allows SSRF. Published: 2020-06-16T13:50:52.000Z Updated: 2024-08-04T10:03:46.436Z Open on db.gcve.eu Reference links https://www.open-xchange.com/ https://packetstormsecurity.com/files/158070/OX-App-Suite-OX-Documents-7.10.3-XSS-SSRF-Improper-Validation.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-8543`	vulnerable	2026-06-03 14:43:09.610131	Details available OX App Suite through 7.10.3 has Improper Input Validation. Published: 2020-06-16T13:46:10.000Z Updated: 2024-08-04T10:03:46.150Z Open on db.gcve.eu Reference links https://www.open-xchange.com/ https://packetstormsecurity.com/files/158070/OX-App-Suite-OX-Documents-7.10.3-XSS-SSRF-Improper-Validation.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-8541`	vulnerable	2026-06-03 14:43:09.542641	Details available OX App Suite through 7.10.3 allows XXE attacks. Published: 2020-06-16T13:47:27.000Z Updated: 2024-08-04T10:03:46.325Z Open on db.gcve.eu Reference links https://www.open-xchange.com/ https://packetstormsecurity.com/files/158070/OX-App-Suite-OX-Documents-7.10.3-XSS-SSRF-Improper-Validation.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-15004`	vulnerable	2026-06-03 14:41:45.075565	Details available OX App Suite through 7.10.3 allows stats/diagnostic?param= XSS. Published: 2020-10-23T04:55:35.000Z Updated: 2024-08-04T13:00:52.080Z Open on db.gcve.eu Reference links https://www.open-xchange.com/ https://seclists.org/fulldisclosure/2020/Oct/20	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-15003`	vulnerable	2026-06-03 14:41:45.073181	Details available OX App Suite through 7.10.3 allows Information Exposure because a user can obtain the IP address and User-Agent string of a different user (via the session API during shared Drive access). Published: 2020-10-23T04:54:27.000Z Updated: 2024-08-04T13:00:52.180Z Open on db.gcve.eu Reference links https://www.open-xchange.com/ https://seclists.org/fulldisclosure/2020/Oct/20	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-14227`	vulnerable	2026-06-03 14:39:44.836242	Details available OX App Suite 7.10.1 and 7.10.2 allows XSS. Published: 2019-10-14T16:17:17.000Z Updated: 2024-08-05T00:12:42.857Z Open on db.gcve.eu Reference links http://seclists.org/fulldisclosure/2019/Oct/25 http://packetstormsecurity.com/files/154826/Open-Xchange-OX-App-Suite-SSRF-XSS-Information-Disclosure-Access-Controls.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-14225`	vulnerable	2026-06-03 14:39:44.834588	Details available OX App Suite 7.10.1 and 7.10.2 allows SSRF. Published: 2019-10-14T16:34:44.000Z Updated: 2024-08-05T00:12:42.806Z Open on db.gcve.eu Reference links http://packetstormsecurity.com/files/154826/Open-Xchange-OX-App-Suite-SSRF-XSS-Information-Disclosure-Access-Controls.html https://seclists.org/fulldisclosure/2019/Oct/25	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Open-Xchange AppSuite 7.10.2

PURL mappings

Vulnerability references

Contribute