# CVEs published 2013-09-05

17 CVEs were published on September 5, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2013-1645](https://cve.now/CVE-2013-1645.md): Directory traversal vulnerability in Open-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before rev14 allows remote aut (no CVSS)
- [CVE-2013-1646](https://cve.now/CVE-2013-1646.md): Multiple cross-site scripting (XSS) vulnerabilities in Open-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before rev14 (no CVSS)
- [CVE-2013-1647](https://cve.now/CVE-2013-1647.md): Multiple CRLF injection vulnerabilities in Open-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before rev14 allow remot (no CVSS)
- [CVE-2013-1648](https://cve.now/CVE-2013-1648.md): The Subscriptions feature in Open-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before rev14 does not properly validat (no CVSS)
- [CVE-2013-1649](https://cve.now/CVE-2013-1649.md): Open-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before rev14 uses the crypt and SHA-1 algorithms for password hashi (no CVSS)
- [CVE-2013-1650](https://cve.now/CVE-2013-1650.md): Open-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before rev14 uses weak permissions (group "other" readable) under o (no CVSS)
- [CVE-2013-1651](https://cve.now/CVE-2013-1651.md): OXUpdater in Open-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before rev14 does not verify X.509 certificates from S (no CVSS)
- [CVE-2013-2582](https://cve.now/CVE-2013-2582.md): CRLF injection vulnerability in the redirect servlet in Open-Xchange AppSuite and Server before 6.22.0 rev15, 6.22.1 before rev17, 7.0.1 bef (no CVSS)
- [CVE-2013-2583](https://cve.now/CVE-2013-2583.md): Multiple cross-site scripting (XSS) vulnerabilities in Open-Xchange AppSuite and Server before 6.20.7 rev16, 6.22.0 before rev15, 6.22.1 bef (no CVSS)
- [CVE-2013-3106](https://cve.now/CVE-2013-3106.md): Multiple cross-site scripting (XSS) vulnerabilities in Open-Xchange AppSuite and Server before 6.20.7 rev18, 6.22.0 before rev16, 6.22.1 bef (no CVSS)
- [CVE-2013-3276](https://cve.now/CVE-2013-3276.md): EMC RSA Archer GRC 5.x before 5.4 allows remote authenticated users to bypass intended access restrictions and complete a login by leveragin (no CVSS)
- [CVE-2013-3277](https://cve.now/CVE-2013-3277.md): Open redirect vulnerability in EMC RSA Archer GRC 5.x before 5.4 allows remote attackers to redirect users to arbitrary web sites and conduc (no CVSS)
- [CVE-2013-4790](https://cve.now/CVE-2013-4790.md): Open-Xchange AppSuite before 7.0.2 rev14, 7.2.0 before rev11, 7.2.1 before rev10, and 7.2.2 before rev9 relies on user-supplied data to pred (no CVSS)
- [CVE-2013-5035](https://cve.now/CVE-2013-5035.md): Multiple race conditions in HtmlCleaner before 2.6, as used in Open-Xchange AppSuite 7.2.2 before rev13 and other products, allow remote aut (no CVSS)
- [CVE-2013-5698](https://cve.now/CVE-2013-5698.md): Cross-site scripting (XSS) vulnerability in Open-Xchange AppSuite and Server before 6.22.0 rev16, 6.22.1 before rev19, 7.0.1 before rev7, 7. (no CVSS)
- [CVE-2013-3479](https://cve.now/CVE-2013-3479.md): Cross-site request forgery (CSRF) vulnerability in the ShareThis plugin before 7.0.6 for WordPress allows remote attackers to hijack the aut (no CVSS)
- [CVE-2013-5471](https://cve.now/CVE-2013-5471.md): Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Global Site Selector (GSS) allows remote attackers to hijack t (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-09-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.