6.5
CVE-2020-8541
- EPSS 1.04%
- Veröffentlicht 16.06.2020 14:15:11
- Zuletzt bearbeitet 21.11.2024 05:38:59
- Erkennungen
LoginOX App Suite through 7.10.3 allows XXE attacks.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Open-xchange ≫ Open-xchange Appsuite Version 7.10.1
Open-xchange ≫ Open-xchange Appsuite Version 7.10.1 Update rev1
Open-xchange ≫ Open-xchange Appsuite Version 7.10.1 Update rev2
Open-xchange ≫ Open-xchange Appsuite Version 7.10.1 Update rev3
Open-xchange ≫ Open-xchange Appsuite Version 7.10.1 Update rev4
Open-xchange ≫ Open-xchange Appsuite Version 7.10.1 Update rev5
Open-xchange ≫ Open-xchange Appsuite Version 7.10.2
Open-xchange ≫ Open-xchange Appsuite Version 7.10.2 Update rev1
Open-xchange ≫ Open-xchange Appsuite Version 7.10.2 Update rev2
Open-xchange ≫ Open-xchange Appsuite Version 7.10.2 Update rev3
Open-xchange ≫ Open-xchange Appsuite Version 7.10.2 Update rev4
Open-xchange ≫ Open-xchange Appsuite Version 7.10.3
Open-xchange ≫ Open-xchange Appsuite Version 7.10.3 Update rev1
Open-xchange ≫ Open-xchange Appsuite Version 7.10.3 Update rev2
Open-xchange ≫ Open-xchange Appsuite Version 7.10.3 Update rev3
Open-xchange ≫ Open-xchange Appsuite Version 7.10.3 Update rev4
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.04% | 0.594 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 6.5 | 2.8 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
|
| NIST | 4 | 8 | 2.9 |
AV:N/AC:L/Au:S/C:P/I:N/A:N
|
CWE-611 Improper Restriction of XML External Entity Reference
The product processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.
https://www.open-xchange.com/
https://packetstormsecurity.com/files/158070/OX-App-Suite-OX-Documents-7.10.3-XSS-SSRF-Improper-Validation.html