Added |
CPE Configuration |
|
OR
*cpe:2.3:a:open-xchange:open-xchange_appsuite:*:*:*:*:*:*:*:* versions up to (including) 7.8.3
*cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.3:rev10:*:*:*:*:*:*
*cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.3:rev11:*:*:*:*:*:*
*cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.3:rev5:*:*:*:*:*:*
*cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.3:rev6:*:*:*:*:*:*
*cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.3:rev8:*:*:*:*:*:*
*cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.3:rev9:*:*:*:*:*:*
*cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.4:*:*:*:*:*:*:*
*cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.4:rev3:*:*:*:*:*:*
*cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.4:rev4:*:*:*:*:*:*
*cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.4:rev5:*:*:*:*:*:*
*cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.4:rev6:*:*:*:*:*:*
*cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.4:rev7:*:*:*:*:*:*
*cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.4:rev8:*:*:*:*:*:*
|
Added |
CVSS V2 |
|
(AV:N/AC:M/Au:S/C:N/I:P/A:N)
|
Added |
CVSS V2 Metadata |
|
Victim must voluntarily interact with attack mechanism
|
Added |
CVSS V3 |
|
AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
|
Added |
CWE |
|
CWE-79
|
Changed |
Reference Type |
http://packetstormsecurity.com/files/148118/OX-App-Suite-7.8.4-XSS-Privilege-Management-SSRF-Traversal.html No Types Assigned
|
http://packetstormsecurity.com/files/148118/OX-App-Suite-7.8.4-XSS-Privilege-Management-SSRF-Traversal.html Exploit, Third Party Advisory, VDB Entry
|
Changed |
Reference Type |
http://seclists.org/fulldisclosure/2018/Jun/23 No Types Assigned
|
http://seclists.org/fulldisclosure/2018/Jun/23 Exploit, Mailing List, Third Party Advisory
|
Changed |
Reference Type |
https://www.exploit-db.com/exploits/44881/ No Types Assigned
|
https://www.exploit-db.com/exploits/44881/ Exploit, Third Party Advisory, VDB Entry
|