Approved changes feed: RSS · Atom

cpe:2.3:a:open-xchange:open-xchange_appsuite:7.4.2:revision10:*:*:*:*:*:*

part: a version: 7.4.2 update: revision10

VendorOpen Xchange (85b486f1-55be-55d2-8b83-a25950d10c23)
ProductOpen Xchange Appsuite (5c4f7579-8692-5eac-881b-9aff46aef717)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:open-xchange.com/appsuite purl2cpe 2026-06-01 10:16:43.941051
pkg:rpm/opensuse/open-xchange-appsuite purl2cpe 2026-06-01 10:16:43.941052

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-5238 vulnerable 2026-06-03 14:34:05.730715 Details available
XML external entity (XXE) vulnerability in Open-Xchange (OX) AppSuite before 7.4.2-rev11 and 7.6.x before 7.6.0-rev9 allows remote attackers to read arbitrary files and possibly other unspecified impact via a crafted OpenDocument Text document.
Published: 2020-01-14T16:00:29.000Z
Updated: 2024-08-06T11:41:47.807Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5236 vulnerable 2026-06-03 14:34:05.716812 Details available
Multiple absolute path traversal vulnerabilities in documentconverter in Open-Xchange (OX) AppSuite before 7.4.2-rev10 and 7.6.x before 7.6.0-rev10 allow remote attackers to read application files via a full pathname in a crafted (1) OLE Object or (2) image in an OpenDocument text file.
Published: 2020-01-31T21:16:52.000Z
Updated: 2024-08-06T11:41:48.270Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.