Open-Xchange Open-Xchange Server 6.22.1
Approved changes feed: RSS · Atom
cpe:2.3:a:open-xchange:open-xchange_server:6.22.1:*:*:*:*:*:*:*
part: a version: 6.22.1 update: *
| Vendor | Open Xchange (85b486f1-55be-55d2-8b83-a25950d10c23) |
|---|---|
| Product | Open Xchange Server (89566b33-4cb5-5a60-9b33-825f8f0d7a6d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2013-5698 |
vulnerable | 2026-06-08 05:04:53.187035 |
Details available
Cross-site scripting (XSS) vulnerability in Open-Xchange AppSuite and Server before 6.22.0 rev16, 6.22.1 before rev19, 7.0.1 before rev7, 7.0.2 before rev11, and 7.2.0 before rev8 allows remote authenticated users to inject arbitrary web script or HTML via a delivery=view action, aka Bug ID 26373, a different vulnerability than CVE-2013-3106.
Published: 2013-09-05T10:00:00.000Z
Updated: 2024-09-16T23:36:10.886Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-3106 |
vulnerable | 2026-06-08 05:04:30.146734 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in Open-Xchange AppSuite and Server before 6.20.7 rev18, 6.22.0 before rev16, 6.22.1 before rev19, 7.0.1 before rev7, 7.0.2 before rev11, and 7.2.0 before rev8 allow remote attackers to inject arbitrary web script or HTML via (1) embedded VBScript, (2) object/data Base64 content, (3) a Content-Type header, or (4) UTF-16 encoding, aka Bug IDs 25957, 26237, 26243, and 26244.
Published: 2013-09-05T10:00:00.000Z
Updated: 2024-09-17T03:47:47.749Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-2583 |
vulnerable | 2026-06-08 05:04:26.934116 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in Open-Xchange AppSuite and Server before 6.20.7 rev16, 6.22.0 before rev15, 6.22.1 before rev17, 7.0.1 before rev6, and 7.0.2 before rev7 allow remote attackers to inject arbitrary web script or HTML via (1) a javascript: URL, (2) malformed nested SCRIPT elements, (3) a mail signature, or (4) JavaScript code within an image file.
Published: 2013-09-05T10:00:00.000Z
Updated: 2024-09-16T19:31:11.662Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-2582 |
vulnerable | 2026-06-08 05:04:26.930604 |
Details available
CRLF injection vulnerability in the redirect servlet in Open-Xchange AppSuite and Server before 6.22.0 rev15, 6.22.1 before rev17, 7.0.1 before rev6, and 7.0.2 before rev7 allows remote attackers to inject arbitrary HTTP headers and conduct open redirect attacks by leveraging improper sanitization of whitespace characters.
Published: 2013-09-05T10:00:00.000Z
Updated: 2024-09-16T18:08:06.780Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1651 |
vulnerable | 2026-06-08 05:03:55.314061 |
Details available
OXUpdater in Open-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before rev14 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof update servers and install arbitrary software via a crafted certificate.
Published: 2013-09-05T10:00:00.000Z
Updated: 2024-09-16T17:52:59.078Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1650 |
vulnerable | 2026-06-08 05:03:55.313755 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1649 |
vulnerable | 2026-06-08 05:03:55.313453 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1648 |
vulnerable | 2026-06-08 05:03:55.313143 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1647 |
vulnerable | 2026-06-08 05:03:55.312825 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1646 |
vulnerable | 2026-06-08 05:03:55.312465 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1645 |
vulnerable | 2026-06-08 05:03:55.311988 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.