6.22.4

DATE	CVE	VULNERABILITY TITLE	RISK
2020-01-02	CVE-2013-6242	Cross-site Scripting vulnerability in Open-Xchange Appsuite Cross-site scripting (XSS) vulnerability in the frontend in Open-Xchange (OX) AppSuite 6.22.3 before 6.22.3-rev5 and 6.22.4 before 6.22.4-rev12 allows remote attackers to inject arbitrary web script or HTML via the subject of an email. network low complexity open-xchange CWE-79	6.1
2019-10-14	CVE-2019-14226	Improper Preservation of Permissions vulnerability in Open-Xchange Appsuite OX App Suite through 7.10.2 has Insecure Permissions. network low complexity open-xchange CWE-281	8.1
2019-06-18	CVE-2019-7159	Unspecified vulnerability in Open-Xchange Appsuite OX App Suite 7.10.1 and earlier allows Information Exposure. network low complexity open-xchange	7.5
2019-06-17	CVE-2019-7158	Unspecified vulnerability in Open-Xchange Appsuite OX App Suite 7.10.0 and earlier has Incorrect Access Control. network low complexity open-xchange critical	9.8
2019-05-23	CVE-2017-13667	Server-Side Request Forgery (SSRF) vulnerability in Open-Xchange Appsuite OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: SSRF. network low complexity open-xchange CWE-918 critical	9.9
2019-05-23	CVE-2017-13668	Cross-site Scripting vulnerability in Open-Xchange Appsuite OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS). network low complexity open-xchange CWE-79	5.4
2019-05-23	CVE-2017-5213	Cross-site Scripting vulnerability in Open-Xchange Appsuite Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Cross Site Scripting (XSS). network low complexity open-xchange CWE-79	6.1
2019-05-23	CVE-2017-5211	Improper Input Validation vulnerability in Open-Xchange Appsuite Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Content Spoofing. network low complexity open-xchange CWE-20	7.5
2019-05-23	CVE-2017-5210	Information Exposure vulnerability in Open-Xchange Appsuite Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Information Exposure. network low complexity open-xchange CWE-200 critical	9.8
2019-05-23	CVE-2017-17061	Cross-site Scripting vulnerability in Open-Xchange Appsuite OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS). network low complexity open-xchange CWE-79	5.4