Vulnerabilities > CVE-2014-5238 - XXE vulnerability in Open-Xchange Appsuite

CVSS 7.8 - HIGH

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

local

low complexity

open-xchange

CWE-611

NVD

Published: 2020-01-14

Updated: 2024-11-21

Summary

XML external entity (XXE) vulnerability in Open-Xchange (OX) AppSuite before 7.4.2-rev11 and 7.6.x before 7.6.0-rev9 allows remote attackers to read arbitrary files and possibly other unspecified impact via a crafted OpenDocument Text document.

Vulnerable Configurations

Part	Description	Count
Application	Open-Xchange Open Xchange Open Xchange Appsuite 6.20.7 Open Xchange Open Xchange Appsuite 6.22.0 Open Xchange Open Xchange Appsuite 6.22.1 Open Xchange Open Xchange Appsuite 6.22.3 Open Xchange Open Xchange Appsuite 6.22.4 Open Xchange Open Xchange Appsuite 7.0.1 Open Xchange Open Xchange Appsuite 7.0.2 Open Xchange Open Xchange Appsuite 7.2.0 Open Xchange Open Xchange Appsuite 7.2.1 Open Xchange Open Xchange Appsuite 7.2.2 Open Xchange Open Xchange Appsuite 7.4.0 Open Xchange Open Xchange Appsuite 7.4.1 Open Xchange Open Xchange Appsuite 7.6.0 Open Xchange Open Xchange Appsuite 7.4.2	32

Common Weakness Enumeration (CWE)

CWE-611 - Improper Restriction of XML External Entity Reference ('XXE')

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References