Vulnerabilities > Open Xchange > OX APP Suite > Medium

DATE CVE VULNERABILITY TITLE RISK
2021-11-22 CVE-2021-33489 Cross-site Scripting vulnerability in Open-Xchange OX APP Suite 7.10.5
OX App Suite through 7.10.5 allows XSS via JavaScript code in a shared XCF file.
network
low complexity
open-xchange CWE-79
6.1
6.1
2021-11-22 CVE-2021-33490 Cross-site Scripting vulnerability in Open-Xchange OX APP Suite 7.10.5
OX App Suite through 7.10.5 allows XSS via a crafted snippet in a shared mail signature.
network
low complexity
open-xchange CWE-79
6.1
6.1