# cve.now: OX Software Gmbh

The newest entries naming OX Software Gmbh as an affected vendor (up to 200), of 33 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2023-29047](https://cve.now/CVE-2023-29047.md): Imageconverter API endpoints provided methods that were not sufficiently validating and sanitizing client input, allowing to inject arbitrar (CVSS 5.3)
- [CVE-2023-29046](https://cve.now/CVE-2023-29046.md): Connections to external data sources, like e-mail autoconfiguration, were not terminated in case they hit a timeout, instead those connectio (CVSS 4.3)
- [CVE-2023-29045](https://cve.now/CVE-2023-29045.md): Documents operations, in this case "drawing", could be manipulated to contain invalid data types, possibly script code. (CVSS 5.4)
- [CVE-2023-29044](https://cve.now/CVE-2023-29044.md): Documents operations could be manipulated to contain invalid data types, possibly script code. (CVSS 5.4)
- [CVE-2023-29043](https://cve.now/CVE-2023-29043.md): Presentations may contain references to images, which are user-controlled, and could include malicious script code that is being processed w (CVSS 6.1)
- [CVE-2023-26456](https://cve.now/CVE-2023-26456.md): Users were able to set an arbitrary "product name" for OX Guard. (CVSS 5.4)
- [CVE-2023-26455](https://cve.now/CVE-2023-26455.md): RMI was not requiring authentication when calling ChronosRMIService:setEventOrganizer. (CVSS 5.6)
- [CVE-2023-26454](https://cve.now/CVE-2023-26454.md): Requests to fetch image metadata could be abused to include SQL queries that would be executed unchecked. (CVSS 7.6)
- [CVE-2023-26453](https://cve.now/CVE-2023-26453.md): Requests to cache an image could be abused to include SQL queries that would be executed unchecked. (CVSS 7.6)
- [CVE-2023-26452](https://cve.now/CVE-2023-26452.md): Requests to cache an image and return its metadata could be abused to include SQL queries that would be executed unchecked. (CVSS 7.6)
- [CVE-2023-26451](https://cve.now/CVE-2023-26451.md): Functions with insufficient randomness were used to generate authorization tokens of the integrated oAuth Authorization Service. (CVSS 7.5)
- [CVE-2023-26450](https://cve.now/CVE-2023-26450.md): The "OX Count" web service did not specify a media-type when processing responses by external resources. (CVSS 5.4)
- [CVE-2023-26449](https://cve.now/CVE-2023-26449.md): The "OX Chat" web service did not specify a media-type when processing responses by external resources. (CVSS 5.4)
- [CVE-2023-26448](https://cve.now/CVE-2023-26448.md): Custom log-in and log-out locations are used-defined as jslob but were not checked to contain malicious protocol handlers. (CVSS 5.4)
- [CVE-2023-26447](https://cve.now/CVE-2023-26447.md): The "upsell" widget for the portal allows to specify a product description. (CVSS 5.4)
- [CVE-2023-26446](https://cve.now/CVE-2023-26446.md): The users clientID at "application passwords" was not sanitized or escaped before being added to DOM. (CVSS 5.4)
- [CVE-2023-26445](https://cve.now/CVE-2023-26445.md): Frontend themes are defined by user-controllable jslob settings and could point to a malicious resource which gets processed during login. (CVSS 5.4)
- [CVE-2023-26443](https://cve.now/CVE-2023-26443.md): Full-text autocomplete search allows user-provided SQL syntax to be injected to SQL statements. (CVSS 5.5)
- [CVE-2023-26442](https://cve.now/CVE-2023-26442.md): In case Cacheservice was configured to use a sproxyd object-storage backend, it would follow HTTP redirects issued by that backend. (CVSS 3.2)
- [CVE-2023-26441](https://cve.now/CVE-2023-26441.md): Cacheservice did not correctly check if relative cache object were pointing to the defined absolute location when accessing resources. (CVSS 5.7)
- [CVE-2023-26440](https://cve.now/CVE-2023-26440.md): The cacheservice API could be abused to indirectly inject parameters with SQL syntax which was insufficiently sanitized and would later be e (CVSS 7.1)
- [CVE-2023-26439](https://cve.now/CVE-2023-26439.md): The cacheservice API could be abused to inject parameters with SQL syntax which was insufficiently sanitized before getting executed as SQL (CVSS 7.6)
- [CVE-2023-26438](https://cve.now/CVE-2023-26438.md): External service lookups for a number of protocols were vulnerable to a time-of-check/time-of-use (TOCTOU) weakness, involving the JDK DNS c (CVSS 4.3)
- [CVE-2023-26430](https://cve.now/CVE-2023-26430.md): Attackers with access to user accounts can inject arbitrary control characters to SIEVE mail-filter rules. (CVSS 3.5)
- [CVE-2023-26436](https://cve.now/CVE-2023-26436.md): Attackers with access to the "documentconverterws" API were able to inject serialized Java objects, that were not properly checked during de (CVSS 7.1)
- [CVE-2023-26435](https://cve.now/CVE-2023-26435.md): It was possible to call filesystem and network references using the local LibreOffice instance using manipulated ODT documents. (CVSS 5.0)
- [CVE-2023-26434](https://cve.now/CVE-2023-26434.md): When adding an external mail account, processing of POP3 "capabilities" responses are not limited to plausible sizes. (CVSS 4.3)
- [CVE-2023-26433](https://cve.now/CVE-2023-26433.md): When adding an external mail account, processing of IMAP "capabilities" responses are not limited to plausible sizes. (CVSS 4.3)
- [CVE-2023-26432](https://cve.now/CVE-2023-26432.md): When adding an external mail account, processing of SMTP "capabilities" responses are not limited to plausible sizes. (CVSS 4.3)
- [CVE-2023-26431](https://cve.now/CVE-2023-26431.md): IPv4-mapped IPv6 addresses did not get recognized as "local" by the code and a connection attempt is made. (CVSS 5.0)
- [CVE-2023-26429](https://cve.now/CVE-2023-26429.md): Control characters were not removed when exporting user feedback content. (CVSS 3.5)
- [CVE-2023-26428](https://cve.now/CVE-2023-26428.md): Attackers can successfully request arbitrary snippet IDs, including E-Mail signatures of other users within the same context. (CVSS 6.5)
- [CVE-2023-26427](https://cve.now/CVE-2023-26427.md): Default permissions for a properties file were too permissive. (CVSS 3.2)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/ox-software
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.