Approved changes feed: RSS · Atom

cpe:2.3:a:open-xchange:open-xchange_appsuite:7.0.2:*:*:*:*:*:*:*

part: a version: 7.0.2 update: *

VendorOpen Xchange (85b486f1-55be-55d2-8b83-a25950d10c23)
ProductOpen Xchange Appsuite (5c4f7579-8692-5eac-881b-9aff46aef717)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:open-xchange.com/appsuite purl2cpe 2026-06-01 10:16:43.940308
pkg:rpm/opensuse/open-xchange-appsuite purl2cpe 2026-06-01 10:16:43.940310

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-5235 vulnerable 2026-06-08 05:05:47.200004 Details available
Cross-site scripting (XSS) vulnerability in the frontend in Open-Xchange (OX) AppSuite before 7.4.2-rev33 and 7.6.x before 7.6.0-rev16 allows remote attackers to inject arbitrary web script or HTML via vectors related to unspecified fields in RSS feeds.
Published: 2014-09-17T14:00:00.000Z
Updated: 2024-08-06T11:41:48.496Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5234 vulnerable 2026-06-08 05:05:47.196105 Details available
Cross-site scripting (XSS) vulnerability in the backend in Open-Xchange (OX) AppSuite before 7.4.2-rev33 and 7.6.x before 7.6.0-rev16 allows remote attackers to inject arbitrary web script or HTML via a folder publication name.
Published: 2014-09-17T14:00:00.000Z
Updated: 2024-08-06T11:41:47.809Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-7143 vulnerable 2026-06-08 05:05:08.522064 Details available
Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite 7.4.1 allows remote attackers to inject arbitrary web script or HTML via the title in a mail filter rule.
Published: 2014-01-26T20:00:00.000Z
Updated: 2024-08-06T18:01:19.326Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-7142 vulnerable 2026-06-08 05:05:08.521544 Details available
Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite 7.4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified oAuth API functions.
Published: 2014-01-26T20:00:00.000Z
Updated: 2024-08-06T18:01:19.326Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-7141 vulnerable 2026-06-08 05:05:08.520898 Details available
Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite 7.4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to crafted "<%" tags.
Published: 2014-01-26T20:00:00.000Z
Updated: 2024-08-06T18:01:19.382Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-7140 vulnerable 2026-06-08 05:05:08.518632 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6997 vulnerable 2026-06-08 05:05:07.684395 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6009 vulnerable 2026-06-08 05:04:55.076014 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5936 vulnerable 2026-06-08 05:04:54.734993 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5935 vulnerable 2026-06-08 05:04:54.734676 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5934 vulnerable 2026-06-08 05:04:54.734353 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5698 vulnerable 2026-06-08 05:04:53.185134 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5690 vulnerable 2026-06-08 05:04:53.078831 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5200 vulnerable 2026-06-08 05:04:51.065953 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4790 vulnerable 2026-06-08 05:04:49.684084 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3106 vulnerable 2026-06-08 05:04:30.144733 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2583 vulnerable 2026-06-08 05:04:26.933042 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2582 vulnerable 2026-06-08 05:04:26.929587 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.