Are there public exploits for open-xchange open-xchange appsuite backend vulnerabilities?

Yes — 13 of open-xchange open-xchange appsuite backend's CVEs have a known public exploit.

Which versions of open-xchange open-xchange appsuite backend are affected?

12 distinct open-xchange open-xchange appsuite backend versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in open-xchange open-xchange appsuite backend CVEs?

open-xchange open-xchange appsuite backend's CVEs most often map to these CWE weakness types: CWE-918 (Server-Side Request Forgery (SSRF)), CWE-400 (Uncontrolled Resource Consumption), CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection')), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')).

How many critical open-xchange open-xchange appsuite backend vulnerabilities are there?

open-xchange open-xchange appsuite backend has 1 critical and 2 high-severity CVEs.

What is the average severity of open-xchange open-xchange appsuite backend CVEs?

The average CVSS base score across open-xchange open-xchange appsuite backend's scored CVEs is 5.6.

RadicalNotion.AI

Log in Create an account

open-xchange

14 CVEs

open-xchange appsuite backend Vulnerabilities

Name: open-xchange appsuite backend vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for open-xchange appsuite backend by open-xchange.

14

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

13

Public exploits

PoC or exploit code

5.6

Avg CVSS

2017–2023

Last updated August 2, 2023

Overview

open-xchange appsuite backend has 14 published CVE records since 2017, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 13 have a known public exploit. The average CVSS base score across scored CVEs is 5.6.

Severity and exploitation

How the CVSS severity of open-xchange appsuite backend's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High2

Medium10

Low1

In CISA’s Known Exploited Vulnerabilities catalog

0

None of open-xchange appsuite backend's CVEs are currently listed in CISA's KEV catalog.

Public exploits

13

13 of open-xchange appsuite backend's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every open-xchange appsuite backend version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

7.10.6 <= v <= 7.10.611 CVEs
< 7.10.69 CVEs
8.0.0 <= v < 8.11.05 CVEs
8.10.0 <= v <= 8.10.02 CVEs
<= 7.10.61 CVE
<= 8.11.01 CVE
7.6.2 <= v <= 7.6.21 CVE
7.8.0 <= v <= 7.8.01 CVE
7.8.2 <= v <= 7.8.21 CVE
8.10.0 <= v <= 8.121 CVE

Fixed in

7.10.69 CVEs
8.11.05 CVEs

Find a version

14 CVEs

Sort

High vulnerability · 2023-08-02
CVE-2023-26451
Public exploit
CWE-330
High · CVSS 7.5
EPSS 1.2% (67th pct)2023-08-02
Critical vulnerability · 2023-08-02
CVE-2023-26443
Public exploit
CWE-89
Critical · CVSS 9.8
EPSS 0.8% (56th pct)2023-08-02
Medium vulnerability · 2023-08-02
CVE-2023-26438
Public exploit
CWE-918
Medium · CVSS 4.3
EPSS 0.6% (48th pct)2023-08-02
Medium vulnerability · 2023-08-02
CVE-2023-26430
Public exploit
CWE-77
Medium · CVSS 4.3
EPSS 0.8% (54th pct)2023-08-02
High vulnerability · 2023-06-20
CVE-2023-26436
Public exploit
Patch
CWE-94
High · CVSS 8.8
EPSS 1.3% (69th pct)2023-06-20
Medium vulnerability · 2023-06-20
CVE-2023-26435
Public exploit
Patch
CWE-918
Medium · CVSS 5.0
EPSS 0.8% (55th pct)2023-06-20
Medium vulnerability · 2023-06-20
CVE-2023-26434
Public exploit
Patch
CWE-400
Medium · CVSS 4.3
EPSS 1.1% (66th pct)2023-06-20
Medium vulnerability · 2023-06-20
CVE-2023-26433
Public exploit
Patch
CWE-400
Medium · CVSS 4.3
EPSS 1.1% (66th pct)2023-06-20
Medium vulnerability · 2023-06-20
CVE-2023-26432
Public exploit
Patch
CWE-400
Medium · CVSS 4.3
EPSS 1.1% (66th pct)2023-06-20
Medium vulnerability · 2023-06-20
CVE-2023-26431
Public exploit
Patch
CWE-918
Medium · CVSS 5.0
EPSS 0.8% (57th pct)2023-06-20
Medium vulnerability · 2023-06-20
CVE-2023-26429
Public exploit
Patch
CWE-77
Medium · CVSS 5.3
EPSS 0.8% (56th pct)2023-06-20
Medium vulnerability · 2023-06-20
CVE-2023-26428
Public exploit
Patch
CWE-639
Medium · CVSS 6.5
EPSS 1.0% (62th pct)2023-06-20
Low vulnerability · 2023-06-20
CVE-2023-26427
Public exploit
Patch
CWE-922
Low · CVSS 3.3
EPSS 0.3% (24th pct)2023-06-20
Medium vulnerability · 2017-03-29
CVE-2016-6846CWE-79
Medium · CVSS 6.1
EPSS 1.2% (67th pct)2017-03-29

Common weakness types

The CWE weakness categories most often found in open-xchange appsuite backend CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many open-xchange appsuite backend CVEs were published each year.

2017

1

2023

13

Other open-xchange products

Browse vulnerabilities for other products by open-xchange.

open-xchange appsuite157 CVEs OX App Suite66 CVEs appsuite-frontend44 CVEs OX Dovecot Pro44 CVEs OX Dovecot CE25 CVEs dovecot16 CVEs open-xchange server13 CVEs ox guard11 CVEs

All open-xchange vulnerabilities

Frequently asked questions

Common questions about open-xchange appsuite backend vulnerabilities.

How many CVEs does open-xchange open-xchange appsuite backend have?: open-xchange open-xchange appsuite backend has 14 published CVE records since 2017.
How many open-xchange open-xchange appsuite backend CVEs are in CISA KEV?: None of open-xchange open-xchange appsuite backend's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for open-xchange open-xchange appsuite backend vulnerabilities?: Yes — 13 of open-xchange open-xchange appsuite backend's CVEs have a known public exploit.
Which versions of open-xchange open-xchange appsuite backend are affected?: 12 distinct open-xchange open-xchange appsuite backend versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in open-xchange open-xchange appsuite backend CVEs?: open-xchange open-xchange appsuite backend's CVEs most often map to these CWE weakness types: CWE-918 (Server-Side Request Forgery (SSRF)), CWE-400 (Uncontrolled Resource Consumption), CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection')), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')).
How many critical open-xchange open-xchange appsuite backend vulnerabilities are there?: open-xchange open-xchange appsuite backend has 1 critical and 2 high-severity CVEs.
What is the average severity of open-xchange open-xchange appsuite backend CVEs?: The average CVSS base score across open-xchange open-xchange appsuite backend's scored CVEs is 5.6.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track open-xchange appsuite backend vulnerabilities

Get an alert for each new open-xchange appsuite backend CVE, with AI-written analysis and remediation steps.

Create an account See pricing