Back to Database
Status published
Medium
CVE-2014-1679
Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite before 7.2.2-rev31,...
Vulnerability Description
Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite before 7.2.2-rev31, 7.4.0 before 7.4.0-rev27, and 7.4.1 before 7.4.1-rev17 allows remote attackers to inject arbitrary web script or HTML via the header in an attached SVG file.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-1679
Credits & Attribution
No credits recorded in the NVD database.
References
More from open-xchange
View All →CVE-2022-43699
OX App Suite before 7.10.6-rev30 allows SSRF because e-mail account...
Unknown
0
CVE-2022-43698
OX App Suite before 7.10.6-rev30 allows SSRF because changing a...
Unknown
0
CVE-2022-43697
OX App Suite before 7.10.6-rev30 allows XSS via an activity...
Unknown
0
CVE-2022-43696
OX App Suite before 7.10.6-rev20 allows XSS via upsell ads....
Unknown
0
CVE-2022-37313
OX App Suite through 7.10.6 allows SSRF because the anti-SSRF...
Unknown
0
Affected Vendor
open-xchange
View all reports →Affected Software
open-xchange appsuite
Vulnerable Versions:
0, 7.4.0, 7.4.1
Timeline
Official Publish:
January 5th, 2015
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.