Open-Xchange Open-Xchange Server 6.20.7

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:open-xchange:open-xchange_server:6.20.7:*:*:*:*:*:*:*

part: a version: 6.20.7 update: *

VendorOpen Xchange (85b486f1-55be-55d2-8b83-a25950d10c23)
ProductOpen Xchange Server (89566b33-4cb5-5a60-9b33-825f8f0d7a6d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-3106 vulnerable 2026-06-08 05:04:30.146672 Details available
Multiple cross-site scripting (XSS) vulnerabilities in Open-Xchange AppSuite and Server before 6.20.7 rev18, 6.22.0 before rev16, 6.22.1 before rev19, 7.0.1 before rev7, 7.0.2 before rev11, and 7.2.0 before rev8 allow remote attackers to inject arbitrary web script or HTML via (1) embedded VBScript, (2) object/data Base64 content, (3) a Content-Type header, or (4) UTF-16 encoding, aka Bug IDs 25957, 26237, 26243, and 26244.
Published: 2013-09-05T10:00:00.000Z
Updated: 2024-09-17T03:47:47.749Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2583 vulnerable 2026-06-08 05:04:26.934055 Details available
Multiple cross-site scripting (XSS) vulnerabilities in Open-Xchange AppSuite and Server before 6.20.7 rev16, 6.22.0 before rev15, 6.22.1 before rev17, 7.0.1 before rev6, and 7.0.2 before rev7 allow remote attackers to inject arbitrary web script or HTML via (1) a javascript: URL, (2) malformed nested SCRIPT elements, (3) a mail signature, or (4) JavaScript code within an image file.
Published: 2013-09-05T10:00:00.000Z
Updated: 2024-09-16T19:31:11.662Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1651 vulnerable 2026-06-08 05:03:55.314024 Details available
OXUpdater in Open-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before rev14 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof update servers and install arbitrary software via a crafted certificate.
Published: 2013-09-05T10:00:00.000Z
Updated: 2024-09-16T17:52:59.078Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1650 vulnerable 2026-06-08 05:03:55.313714 Details available
Open-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before rev14 uses weak permissions (group "other" readable) under opt/open-xchange/etc/, which allows local users to obtain sensitive information via standard filesystem operations.
Published: 2013-09-05T10:00:00.000Z
Updated: 2024-09-16T17:39:05.764Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1649 vulnerable 2026-06-08 05:03:55.313415 Details available
Open-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before rev14 uses the crypt and SHA-1 algorithms for password hashing, which makes it easier for context-dependent attackers to obtain cleartext passwords via a brute-force attack.
Published: 2013-09-05T10:00:00.000Z
Updated: 2024-09-16T19:41:25.986Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1648 vulnerable 2026-06-08 05:03:55.313106 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1647 vulnerable 2026-06-08 05:03:55.312784 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1646 vulnerable 2026-06-08 05:03:55.312423 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1645 vulnerable 2026-06-08 05:03:55.310852 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.