Approved changes feed: RSS · Atom

cpe:2.3:a:open-xchange:open-xchange_appsuite:7.4.0:*:*:*:*:*:*:*

part: a version: 7.4.0 update: *

VendorOpen Xchange (85b486f1-55be-55d2-8b83-a25950d10c23)
ProductOpen Xchange Appsuite (5c4f7579-8692-5eac-881b-9aff46aef717)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:open-xchange.com/appsuite purl2cpe 2026-06-01 10:16:43.941040
pkg:rpm/opensuse/open-xchange-appsuite purl2cpe 2026-06-01 10:16:43.941041

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-5235 vulnerable 2026-06-08 05:05:47.200071 Details available
Cross-site scripting (XSS) vulnerability in the frontend in Open-Xchange (OX) AppSuite before 7.4.2-rev33 and 7.6.x before 7.6.0-rev16 allows remote attackers to inject arbitrary web script or HTML via vectors related to unspecified fields in RSS feeds.
Published: 2014-09-17T14:00:00.000Z
Updated: 2024-08-06T11:41:48.496Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5234 vulnerable 2026-06-08 05:05:47.198432 Details available
Cross-site scripting (XSS) vulnerability in the backend in Open-Xchange (OX) AppSuite before 7.4.2-rev33 and 7.6.x before 7.6.0-rev16 allows remote attackers to inject arbitrary web script or HTML via a folder publication name.
Published: 2014-09-17T14:00:00.000Z
Updated: 2024-08-06T11:41:47.809Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1679 vulnerable 2026-06-08 05:05:25.825160 Details available
Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite before 7.2.2-rev31, 7.4.0 before 7.4.0-rev27, and 7.4.1 before 7.4.1-rev17 allows remote attackers to inject arbitrary web script or HTML via the header in an attached SVG file.
Published: 2015-01-05T20:00:00.000Z
Updated: 2024-08-06T09:50:10.646Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-7486 vulnerable 2026-06-08 05:05:10.444720 Details available
Cross-site scripting (XSS) vulnerability in the backend in Open-Xchange (OX) AppSuite 7.2.x before 7.2.2-rev27 and 7.4.x before 7.4.0-rev20 allows remote attackers to inject arbitrary web script or HTML via the body of an email. NOTE: this vulnerability was SPLIT from CVE-2013-6242 because it affects different sets of versions.
Published: 2020-01-02T18:05:38.000Z
Updated: 2024-08-06T18:09:17.080Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-7485 vulnerable 2026-06-08 05:05:10.444318 Details available
Cross-site scripting (XSS) vulnerability in the backend in Open-Xchange (OX) AppSuite 7.2.x before 7.2.2-rev26 and 7.4.x before 7.4.0-rev16 allows remote attackers to inject arbitrary web script or HTML via the publication name, which is not properly handled in an error message. NOTE: this vulnerability was SPLIT from CVE-2013-6242 because it affects different sets of versions.
Published: 2020-01-02T18:05:35.000Z
Updated: 2024-08-06T18:09:17.021Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-7143 vulnerable 2026-06-08 05:05:08.522128 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-7142 vulnerable 2026-06-08 05:05:08.521610 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-7141 vulnerable 2026-06-08 05:05:08.520968 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-7140 vulnerable 2026-06-08 05:05:08.520339 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6242 vulnerable 2026-06-08 05:04:55.736923 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6241 vulnerable 2026-06-08 05:04:55.733537 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6074 vulnerable 2026-06-08 05:04:55.298129 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.