Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2014-8993

Overview

Vulnerability Score 4.3 4.3
CVE Id CVE-2014-8993
Last Modified 08 Jan 2015 02:06:04
Published 07 Jan 2015 01:59:01
Confidentiality Impact NONE NONE
Integrity Impact PARTIAL PARTIAL
Availability Impact NONE NONE
Access Vector NETWORK
Access Complexity MEDIUM
Authentication NONE

CVE-2014-8993

Summary

Cross-site scripting (XSS) vulnerability in the backend in Open-Xchange (OX) AppSuite before 7.4.2-rev40, 7.6.0 before 7.6.0-rev32, and 7.6.1 before 7.6.1-rev11 allows remote attackers to inject arbitrary web script or HTML via a crafted XHTML file with the application/xhtml+xml MIME type.

Vulnerable Systems

Application

  • Open-xchange Appsuite 7.4.2

  • Open-xchange Appsuite 7.6.0

  • Open-xchange Appsuite 7.6.1


References

SECTRACK - 1031488

BUGTRAQ - 20150105 Open-Xchange Security Advisory 2015-01-05

SECUNIA - 62031

MISC - http://packetstormsecurity.com/files/129811/Open-Xchange-Server-6-OX-AppSuite-7.6.1-Cross-Site-Scripting.html


Last Updated: 27 May 2016 11:07:28