Approved changes feed: RSS · Atom

cpe:2.3:a:open-xchange:open-xchange_server:7.2.0:*:*:*:*:*:*:*

part: a version: 7.2.0 update: *

VendorOpen Xchange (85b486f1-55be-55d2-8b83-a25950d10c23)
ProductOpen Xchange Server (89566b33-4cb5-5a60-9b33-825f8f0d7a6d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-5698 vulnerable 2026-06-03 14:33:22.805658 Details available
Cross-site scripting (XSS) vulnerability in Open-Xchange AppSuite and Server before 6.22.0 rev16, 6.22.1 before rev19, 7.0.1 before rev7, 7.0.2 before rev11, and 7.2.0 before rev8 allows remote authenticated users to inject arbitrary web script or HTML via a delivery=view action, aka Bug ID 26373, a different vulnerability than CVE-2013-3106.
Published: 2013-09-05T10:00:00.000Z
Updated: 2024-09-16T23:36:10.886Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3106 vulnerable 2026-06-03 14:33:05.952082 Details available
Multiple cross-site scripting (XSS) vulnerabilities in Open-Xchange AppSuite and Server before 6.20.7 rev18, 6.22.0 before rev16, 6.22.1 before rev19, 7.0.1 before rev7, 7.0.2 before rev11, and 7.2.0 before rev8 allow remote attackers to inject arbitrary web script or HTML via (1) embedded VBScript, (2) object/data Base64 content, (3) a Content-Type header, or (4) UTF-16 encoding, aka Bug IDs 25957, 26237, 26243, and 26244.
Published: 2013-09-05T10:00:00.000Z
Updated: 2024-09-17T03:47:47.749Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.