Vulnerabilities > Open Xchange > Open Xchange Appsuite Backend > Low

DATE CVE VULNERABILITY TITLE RISK
2023-08-02 CVE-2023-26438 Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Open-Xchange Appsuite Backend 7.10.6/8.10.0
External service lookups for a number of protocols were vulnerable to a time-of-check/time-of-use (TOCTOU) weakness, involving the JDK DNS cache.
network
high complexity
open-xchange CWE-367
3.1
2023-06-20 CVE-2023-26427 Incorrect Permission Assignment for Critical Resource vulnerability in Open-Xchange Appsuite Backend
Default permissions for a properties file were too permissive.
local
low complexity
open-xchange CWE-732
3.3