OX Software Gmbh vulnerabilities
33 CVEs and advisories name OX Software Gmbh as an affected vendor, newest first. Follow it as a feed.
- CVE-2023-29047Imageconverter API endpoints provided methods that were not sufficiently validating and sanitizing client input, allowing to inject arbitrar
- CVE-2023-29046Connections to external data sources, like e-mail autoconfiguration, were not terminated in case they hit a timeout, instead those connectio
- CVE-2023-29045Documents operations, in this case "drawing", could be manipulated to contain invalid data types, possibly script code.
- CVE-2023-29044Documents operations could be manipulated to contain invalid data types, possibly script code.
- CVE-2023-29043Presentations may contain references to images, which are user-controlled, and could include malicious script code that is being processed w
- CVE-2023-26456Users were able to set an arbitrary "product name" for OX Guard.
- CVE-2023-26455RMI was not requiring authentication when calling ChronosRMIService:setEventOrganizer.
- CVE-2023-26454Requests to fetch image metadata could be abused to include SQL queries that would be executed unchecked.
- CVE-2023-26453Requests to cache an image could be abused to include SQL queries that would be executed unchecked.
- CVE-2023-26452Requests to cache an image and return its metadata could be abused to include SQL queries that would be executed unchecked.
- CVE-2023-26451Functions with insufficient randomness were used to generate authorization tokens of the integrated oAuth Authorization Service.
- CVE-2023-26450The "OX Count" web service did not specify a media-type when processing responses by external resources.
- CVE-2023-26449The "OX Chat" web service did not specify a media-type when processing responses by external resources.
- CVE-2023-26448Custom log-in and log-out locations are used-defined as jslob but were not checked to contain malicious protocol handlers.
- CVE-2023-26447The "upsell" widget for the portal allows to specify a product description.
- CVE-2023-26446The users clientID at "application passwords" was not sanitized or escaped before being added to DOM.
- CVE-2023-26445Frontend themes are defined by user-controllable jslob settings and could point to a malicious resource which gets processed during login.
- CVE-2023-26443Full-text autocomplete search allows user-provided SQL syntax to be injected to SQL statements.
- CVE-2023-26442In case Cacheservice was configured to use a sproxyd object-storage backend, it would follow HTTP redirects issued by that backend.
- CVE-2023-26441Cacheservice did not correctly check if relative cache object were pointing to the defined absolute location when accessing resources.
- CVE-2023-26440The cacheservice API could be abused to indirectly inject parameters with SQL syntax which was insufficiently sanitized and would later be e
- CVE-2023-26439The cacheservice API could be abused to inject parameters with SQL syntax which was insufficiently sanitized before getting executed as SQL
- CVE-2023-26438External service lookups for a number of protocols were vulnerable to a time-of-check/time-of-use (TOCTOU) weakness, involving the JDK DNS c
- CVE-2023-26430Attackers with access to user accounts can inject arbitrary control characters to SIEVE mail-filter rules.
- CVE-2023-26436Attackers with access to the "documentconverterws" API were able to inject serialized Java objects, that were not properly checked during de
- CVE-2023-26435It was possible to call filesystem and network references using the local LibreOffice instance using manipulated ODT documents.
- CVE-2023-26434When adding an external mail account, processing of POP3 "capabilities" responses are not limited to plausible sizes.
- CVE-2023-26433When adding an external mail account, processing of IMAP "capabilities" responses are not limited to plausible sizes.
- CVE-2023-26432When adding an external mail account, processing of SMTP "capabilities" responses are not limited to plausible sizes.
- CVE-2023-26431IPv4-mapped IPv6 addresses did not get recognized as "local" by the code and a connection attempt is made.