Approved changes feed: RSS · Atom

cpe:2.3:a:open-xchange:open-xchange_appsuite:7.0.1:*:*:*:*:*:*:*

part: a version: 7.0.1 update: *

VendorOpen Xchange (85b486f1-55be-55d2-8b83-a25950d10c23)
ProductOpen Xchange Appsuite (5c4f7579-8692-5eac-881b-9aff46aef717)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:open-xchange.com/appsuite purl2cpe 2026-06-01 10:16:43.940305
pkg:rpm/opensuse/open-xchange-appsuite purl2cpe 2026-06-01 10:16:43.940307

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-5235 vulnerable 2026-06-08 05:05:47.199986 Details available
Cross-site scripting (XSS) vulnerability in the frontend in Open-Xchange (OX) AppSuite before 7.4.2-rev33 and 7.6.x before 7.6.0-rev16 allows remote attackers to inject arbitrary web script or HTML via vectors related to unspecified fields in RSS feeds.
Published: 2014-09-17T14:00:00.000Z
Updated: 2024-08-06T11:41:48.496Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5234 vulnerable 2026-06-08 05:05:47.195461 Details available
Cross-site scripting (XSS) vulnerability in the backend in Open-Xchange (OX) AppSuite before 7.4.2-rev33 and 7.6.x before 7.6.0-rev16 allows remote attackers to inject arbitrary web script or HTML via a folder publication name.
Published: 2014-09-17T14:00:00.000Z
Updated: 2024-08-06T11:41:47.809Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-7143 vulnerable 2026-06-08 05:05:08.522049 Details available
Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite 7.4.1 allows remote attackers to inject arbitrary web script or HTML via the title in a mail filter rule.
Published: 2014-01-26T20:00:00.000Z
Updated: 2024-08-06T18:01:19.326Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-7142 vulnerable 2026-06-08 05:05:08.521525 Details available
Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite 7.4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified oAuth API functions.
Published: 2014-01-26T20:00:00.000Z
Updated: 2024-08-06T18:01:19.326Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-7141 vulnerable 2026-06-08 05:05:08.520880 Details available
Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite 7.4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to crafted "<%" tags.
Published: 2014-01-26T20:00:00.000Z
Updated: 2024-08-06T18:01:19.382Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-7140 vulnerable 2026-06-08 05:05:08.518614 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6997 vulnerable 2026-06-08 05:05:07.683907 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6009 vulnerable 2026-06-08 05:04:55.075996 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5936 vulnerable 2026-06-08 05:04:54.734972 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5935 vulnerable 2026-06-08 05:04:54.734656 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5934 vulnerable 2026-06-08 05:04:54.734332 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5698 vulnerable 2026-06-08 05:04:53.185113 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5690 vulnerable 2026-06-08 05:04:53.078806 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5200 vulnerable 2026-06-08 05:04:51.065897 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3106 vulnerable 2026-06-08 05:04:30.144710 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2583 vulnerable 2026-06-08 05:04:26.933024 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2582 vulnerable 2026-06-08 05:04:26.929097 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.