Login Request a demo
OP
Vendor
Open-xchange
15 products with CVEs on record
283
CVEs
0
On KEV
0
New 30D
Products
OA
Open-xchange Appsuite
Open-xchange
9.9
157 CVEs0 on KEV0 new
OA
OX App Suite
Open-xchange
9.8
48 CVEs0 on KEV0 new
DO
Dovecot
Open-xchange
9.1
16 CVEs0 on KEV0 new
OA
Open-xchange Appsuite Backend
Open-xchange
9.8
14 CVEs0 on KEV0 new
OS
Open-xchange Server
Open-xchange
6.1
13 CVEs0 on KEV0 new
OG
OX Guard
Open-xchange
8.8
11 CVEs0 on KEV0 new
OA
Open-xchange Appsuite Frontend
Open-xchange
8.8
8 CVEs0 on KEV0 new
OA
Open-xchange Appsuite Office
Open-xchange
7.8
4 CVEs0 on KEV0 new
AS
App Suite
Open-xchange
6.5
3 CVEs0 on KEV0 new
OD
Open-xchange Documents
Open-xchange
6.5
3 CVEs0 on KEV0 new
OP
Open-xchange
Open-xchange
–
2 CVEs0 on KEV0 new
DO
Documentconverter-api
Open-xchange
6.1
1 CVEs0 on KEV0 new
OW
Office Web
Open-xchange
6.1
1 CVEs0 on KEV0 new
OC
OX Cloud
Open-xchange
7.2
1 CVEs0 on KEV0 new
OD
OX Dovecot Pro
Open-xchange
7.5
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-42006
DO
Dovecot
Open-xchange
4.3
1%
May 12An attacker can cause uncontrolled memory usage with excessive bracing over IMAP
CVE-2026-40020
DO
Dovecot
Open-xchange
4.3
0%
May 12Attacker can use the IMAP SETACL command to inject the anyone permission to user's dovecot-acl file even if imap_acl_allow_anyone=no
CVE-2026-40016
DO
Dovecot
Open-xchange
6.5
0%
May 12Attacker can upload a malicious Sieve script over ManageSieve service (or locally) to bypass configured CPU time limits for Sieve up to 130 times of the configured limit
CVE-2026-33603
DO
Dovecot
Open-xchange
5.3
0%
May 12Attacker can use a specially crafted base64 exchange between Dovecot and Client to fake SCRAM TLS channel binding
CVE-2026-27851
DO
Dovecot
Open-xchange
9.1
0%
May 12When safe filter is used with variable expansion, all following pipelines on the same string are incorrectly interpreted as safe too, enabling unsafe data to be unescaped
CVE-2026-27860
DO
Dovecot
Open-xchange
5.3
0%
Mar 27If auth_username_chars is empty, it is possible to inject arbitrary LDAP filter to Dovecot's LDAP authentication
CVE-2026-27859
DO
Dovecot
Open-xchange
5.3
0%
Mar 27A mail message containing excessive amount of RFC 2231 MIME parameters causes LMTP to use too much CPU
CVE-2026-27858
DO
Dovecot
Open-xchange
7.5
1%
Mar 27Attacker can send a specifically crafted message before authentication that causes managesieve to allocate large amount of memory
CVE-2026-27857
DO
Dovecot
Open-xchange
7.5
1%
Mar 27Sending "NOOP (((...)))" command with 4000 parenthesis open+close results in ~1MB extra memory usage
CVE-2026-27856
DO
Dovecot
Open-xchange
5.9
0%
Mar 27Doveadm credentials are verified using direct comparison which is susceptible to timing oracle attack
CVE-2026-27855
DO
Dovecot
Open-xchange
5.9
0%
Mar 27Dovecot OTP authentication is vulnerable to replay attack under specific conditions
CVE-2026-24031
DO
Dovecot
Open-xchange
8.2
0%
Mar 27Dovecot SQL based authentication can be bypassed when auth_username_chars is cleared by admin
CVE-2026-0394
DO
Dovecot
Open-xchange
5.3
0%
Mar 27When dovecot has been configured to use per-domain passwd files, and they are placed one path component above /etc, or slash has been added to allowed characters, path traversal…
CVE-2025-59032
DO
Dovecot
Open-xchange
7.5
1%
Mar 27ManageSieve AUTHENTICATE command crashes when using literal as SASL initial response
CVE-2025-59031
DO
Dovecot
Open-xchange
4.3
0%
Mar 27Dovecot has provided a script to use for attachment to text conversion
CVE-2025-59028
DO
Dovecot
Open-xchange
7.5
0%
Mar 27When sending invalid base64 SASL data, login process is disconnected from the auth server, causing all active authentication sessions to fail
CVE-2024-23185
OD
OX Dovecot Pro
Open-xchange
7.5
1%
Sep 10Very large headers can cause resource exhaustion when parsing message
CVE-2024-4367
OA
Open-xchange Appsuite Frontend
Open-xchange
8.8
71%
May 14A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context
CVE-2024-23193
OA
OX App Suite
Open-xchange
5.3
1%
May 6E-Mails exported as PDF were stored in a cache that did not consider specific session information for the related user account
CVE-2024-23188
AS
App Suite
Open-xchange
6.5
1%
May 6Maliciously crafted E-Mail attachment names could be used to temporarily execute script code in the context of the users browser session
CVE-2024-23187
OA
OX App Suite
Open-xchange
6.1
0%
May 6Content-ID based embedding of resources in E-Mails could be abused to trigger client-side script code when using the "show more" option
CVE-2024-23186
OA
OX App Suite
Open-xchange
6.1
1%
May 6E-Mail containing malicious display-name information could trigger client-side script execution when using specific mobile devices
CVE-2023-41708
OA
Open-xchange Appsuite
Open-xchange
5.4
0%
Feb 12References to the "app loader" functionality could contain redirects to unexpected locations
CVE-2023-41707
OA
Open-xchange Appsuite
Open-xchange
6.5
1%
Feb 12Processing of user-defined mail search expressions is not limited
CVE-2023-41706
OA
Open-xchange Appsuite
Open-xchange
6.5
1%
Feb 12Processing time of drive search expressions now gets monitored, and the related request is terminated if a resource threshold is reached
CVE-2023-41705
OA
Open-xchange Appsuite
Open-xchange
6.5
1%
Feb 12Processing of user-defined DAV user-agent strings is not limited
CVE-2023-41704
OA
Open-xchange Appsuite
Open-xchange
6.1
1%
Feb 12Processing of CID references at E-Mail can be abused to inject malicious script code that passes the sanitization engine
CVE-2023-41703
OA
Open-xchange Appsuite
Open-xchange
6.1
1%
Feb 12User ID references at mentions in document comments were not correctly sanitized
CVE-2023-41710
OA
OX App Suite
Open-xchange
5.4
0%
Jan 8User-defined script code could be stored for a upsell related shop URL
CVE-2023-29052
OA
OX App Suite
Open-xchange
5.4
0%
Jan 8Users were able to define disclaimer texts for an upsell shop dialog that would contain script code that was not sanitized correctly
CVE-2023-29051
OA
OX App Suite
Open-xchange
8.1
1%
Jan 8User-defined OXMF templates could be used to access a limited part of the internal OX App Suite Java API
CVE-2023-29050
OA
OX App Suite
Open-xchange
9.6
2%
Jan 8The optional "LDAP contacts provider" could be abused by privileged users to inject LDAP filter strings that allow to access content outside of the intended hierarchy
CVE-2023-29049
OA
OX App Suite
Open-xchange
6.1
1%
Jan 8The "upsell" widget at the portal page could be abused to inject arbitrary script code
CVE-2023-29048
OA
OX App Suite
Open-xchange
8.8
1%
Jan 8A component for parsing OXMF templates could be abused to execute arbitrary system commands that would be executed as the non-privileged runtime user
CVE-2023-29047
OA
Open-xchange Appsuite
Open-xchange
7.3
0%
Nov 2Imageconverter API endpoints provided methods that were not sufficiently validating and sanitizing client input, allowing to inject arbitrary SQL statements
CVE-2023-29046
OA
Open-xchange Appsuite
Open-xchange
4.3
0%
Nov 2Connections to external data sources, like e-mail autoconfiguration, were not terminated in case they hit a timeout, instead those connections were logged
CVE-2023-29045
OA
Open-xchange Appsuite
Open-xchange
5.4
0%
Nov 2Documents operations, in this case "drawing", could be manipulated to contain invalid data types, possibly script code
CVE-2023-29044
OA
Open-xchange Appsuite
Open-xchange
5.4
0%
Nov 2Documents operations could be manipulated to contain invalid data types, possibly script code
CVE-2023-29043
OA
Open-xchange Appsuite
Open-xchange
6.1
0%
Nov 2Presentations may contain references to images, which are user-controlled, and could include malicious script code that is being processed when editing a document
CVE-2023-26456
OG
OX Guard
Open-xchange
5.4
0%
Nov 2Users were able to set an arbitrary "product name" for OX Guard
CVE-2023-26455
OA
Open-xchange Appsuite
Open-xchange
7.8
0%
Nov 2RMI was not requiring authentication when calling ChronosRMIService:setEventOrganizer
CVE-2023-26454
OA
Open-xchange Appsuite
Open-xchange
8.8
0%
Nov 2Requests to fetch image metadata could be abused to include SQL queries that would be executed unchecked
CVE-2023-26453
OA
Open-xchange Appsuite
Open-xchange
8.8
0%
Nov 2Requests to cache an image could be abused to include SQL queries that would be executed unchecked
CVE-2023-26452
OA
Open-xchange Appsuite
Open-xchange
8.8
0%
Nov 2Requests to cache an image and return its metadata could be abused to include SQL queries that would be executed unchecked
CVE-2023-26451
OA
Open-xchange Appsuite Backend
Open-xchange
7.5
1%
Aug 2Functions with insufficient randomness were used to generate authorization tokens of the integrated oAuth Authorization Service
CVE-2023-26450
OA
Open-xchange Appsuite Frontend
Open-xchange
5.4
1%
Aug 2The "OX Count" web service did not specify a media-type when processing responses by external resources
CVE-2023-26449
OA
Open-xchange Appsuite Frontend
Open-xchange
5.4
1%
Aug 2The "OX Chat" web service did not specify a media-type when processing responses by external resources
CVE-2023-26448
OA
Open-xchange Appsuite Frontend
Open-xchange
5.4
1%
Aug 2Custom log-in and log-out locations are used-defined as jslob but were not checked to contain malicious protocol handlers
CVE-2023-26447
OA
Open-xchange Appsuite Frontend
Open-xchange
5.4
1%
Aug 2The "upsell" widget for the portal allows to specify a product description
CVE-2023-26446
OA
Open-xchange Appsuite Frontend
Open-xchange
5.4
1%
Aug 2The users clientID at "application passwords" was not sanitized or escaped before being added to DOM
CVE-2023-26445
OA
Open-xchange Appsuite Frontend
Open-xchange
5.4
1%
Aug 2Frontend themes are defined by user-controllable jslob settings and could point to a malicious resource which gets processed during login
CVE-2023-26443
OA
Open-xchange Appsuite Backend
Open-xchange
9.8
1%
Aug 2Full-text autocomplete search allows user-provided SQL syntax to be injected to SQL statements
CVE-2023-26442
OA
Open-xchange Appsuite Office
Open-xchange
3.2
0%
Aug 2In case Cacheservice was configured to use a sproxyd object-storage backend, it would follow HTTP redirects issued by that backend
CVE-2023-26441
OA
Open-xchange Appsuite Office
Open-xchange
5.5
0%
Aug 2Cacheservice did not correctly check if relative cache object were pointing to the defined absolute location when accessing resources
CVE-2023-26440
OA
Open-xchange Appsuite Office
Open-xchange
7.8
0%
Aug 2The cacheservice API could be abused to indirectly inject parameters with SQL syntax which was insufficiently sanitized and would later be executed when creating new cache groups
CVE-2023-26439
OA
Open-xchange Appsuite Office
Open-xchange
7.8
0%
Aug 2The cacheservice API could be abused to inject parameters with SQL syntax which was insufficiently sanitized before getting executed as SQL statement
CVE-2023-26438
OA
Open-xchange Appsuite Backend
Open-xchange
3.1
1%
Aug 2External service lookups for a number of protocols were vulnerable to a time-of-check/time-of-use (TOCTOU) weakness, involving the JDK DNS cache
CVE-2023-26430
OA
Open-xchange Appsuite Backend
Open-xchange
4.3
1%
Aug 2Attackers with access to user accounts can inject arbitrary control characters to SIEVE mail-filter rules
CVE-2023-26436
OA
Open-xchange Appsuite Backend
Open-xchange
8.8
1%
Jun 20Attackers with access to the "documentconverterws" API were able to inject serialized Java objects, that were not properly checked during deserialization
CVE-2023-26435
OA
Open-xchange Appsuite Backend
Open-xchange
5.0
1%
Jun 20It was possible to call filesystem and network references using the local LibreOffice instance using manipulated ODT documents