Approved changes feed: RSS · Atom

cpe:2.3:a:open-xchange:open-xchange_appsuite:6.20.7:*:*:*:*:*:*:*

part: a version: 6.20.7 update: *

VendorOpen Xchange (85b486f1-55be-55d2-8b83-a25950d10c23)
ProductOpen Xchange Appsuite (5c4f7579-8692-5eac-881b-9aff46aef717)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:open-xchange.com/appsuite purl2cpe 2026-06-01 10:16:43.940292
pkg:rpm/opensuse/open-xchange-appsuite purl2cpe 2026-06-01 10:16:43.940293

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-5235 vulnerable 2026-06-08 05:05:47.199930 Details available
Cross-site scripting (XSS) vulnerability in the frontend in Open-Xchange (OX) AppSuite before 7.4.2-rev33 and 7.6.x before 7.6.0-rev16 allows remote attackers to inject arbitrary web script or HTML via vectors related to unspecified fields in RSS feeds.
Published: 2014-09-17T14:00:00.000Z
Updated: 2024-08-06T11:41:48.496Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5234 vulnerable 2026-06-08 05:05:47.193927 Details available
Cross-site scripting (XSS) vulnerability in the backend in Open-Xchange (OX) AppSuite before 7.4.2-rev33 and 7.6.x before 7.6.0-rev16 allows remote attackers to inject arbitrary web script or HTML via a folder publication name.
Published: 2014-09-17T14:00:00.000Z
Updated: 2024-08-06T11:41:47.809Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-7143 vulnerable 2026-06-08 05:05:08.521995 Details available
Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite 7.4.1 allows remote attackers to inject arbitrary web script or HTML via the title in a mail filter rule.
Published: 2014-01-26T20:00:00.000Z
Updated: 2024-08-06T18:01:19.326Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-7142 vulnerable 2026-06-08 05:05:08.521471 Details available
Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite 7.4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified oAuth API functions.
Published: 2014-01-26T20:00:00.000Z
Updated: 2024-08-06T18:01:19.326Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-7141 vulnerable 2026-06-08 05:05:08.520823 Details available
Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite 7.4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to crafted "<%" tags.
Published: 2014-01-26T20:00:00.000Z
Updated: 2024-08-06T18:01:19.382Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-7140 vulnerable 2026-06-08 05:05:08.518556 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6997 vulnerable 2026-06-08 05:05:07.682396 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6009 vulnerable 2026-06-08 05:04:55.075936 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5690 vulnerable 2026-06-08 05:04:53.077762 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3106 vulnerable 2026-06-08 05:04:30.144628 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2583 vulnerable 2026-06-08 05:04:26.932933 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.