Approved changes feed: RSS · Atom

cpe:2.3:a:open-xchange:open-xchange_appsuite:7.2.2:*:*:*:*:*:*:*

part: a version: 7.2.2 update: *

VendorOpen Xchange (85b486f1-55be-55d2-8b83-a25950d10c23)
ProductOpen Xchange Appsuite (5c4f7579-8692-5eac-881b-9aff46aef717)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:open-xchange.com/appsuite purl2cpe 2026-06-01 10:16:43.941037
pkg:rpm/opensuse/open-xchange-appsuite purl2cpe 2026-06-01 10:16:43.941038

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-5235 vulnerable 2026-06-08 05:05:47.200055 Details available
Cross-site scripting (XSS) vulnerability in the frontend in Open-Xchange (OX) AppSuite before 7.4.2-rev33 and 7.6.x before 7.6.0-rev16 allows remote attackers to inject arbitrary web script or HTML via vectors related to unspecified fields in RSS feeds.
Published: 2014-09-17T14:00:00.000Z
Updated: 2024-08-06T11:41:48.496Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5234 vulnerable 2026-06-08 05:05:47.197855 Details available
Cross-site scripting (XSS) vulnerability in the backend in Open-Xchange (OX) AppSuite before 7.4.2-rev33 and 7.6.x before 7.6.0-rev16 allows remote attackers to inject arbitrary web script or HTML via a folder publication name.
Published: 2014-09-17T14:00:00.000Z
Updated: 2024-08-06T11:41:47.809Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-7486 vulnerable 2026-06-08 05:05:10.444698 Details available
Cross-site scripting (XSS) vulnerability in the backend in Open-Xchange (OX) AppSuite 7.2.x before 7.2.2-rev27 and 7.4.x before 7.4.0-rev20 allows remote attackers to inject arbitrary web script or HTML via the body of an email. NOTE: this vulnerability was SPLIT from CVE-2013-6242 because it affects different sets of versions.
Published: 2020-01-02T18:05:38.000Z
Updated: 2024-08-06T18:09:17.080Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-7485 vulnerable 2026-06-08 05:05:10.444290 Details available
Cross-site scripting (XSS) vulnerability in the backend in Open-Xchange (OX) AppSuite 7.2.x before 7.2.2-rev26 and 7.4.x before 7.4.0-rev16 allows remote attackers to inject arbitrary web script or HTML via the publication name, which is not properly handled in an error message. NOTE: this vulnerability was SPLIT from CVE-2013-6242 because it affects different sets of versions.
Published: 2020-01-02T18:05:35.000Z
Updated: 2024-08-06T18:09:17.021Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-7143 vulnerable 2026-06-08 05:05:08.522112 Details available
Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite 7.4.1 allows remote attackers to inject arbitrary web script or HTML via the title in a mail filter rule.
Published: 2014-01-26T20:00:00.000Z
Updated: 2024-08-06T18:01:19.326Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-7142 vulnerable 2026-06-08 05:05:08.521594 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-7141 vulnerable 2026-06-08 05:05:08.520950 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-7140 vulnerable 2026-06-08 05:05:08.518686 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6997 vulnerable 2026-06-08 05:05:07.685898 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6242 vulnerable 2026-06-08 05:04:55.736890 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6241 vulnerable 2026-06-08 05:04:55.733511 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6074 vulnerable 2026-06-08 05:04:55.296928 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5035 vulnerable 2026-06-08 05:04:50.689304 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4790 vulnerable 2026-06-08 05:04:49.685845 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.