Back to Database
Status published
High
CVE-2014-5236
Multiple absolute path traversal vulnerabilities in documentconverter in Open-Xchange (OX)...
Vulnerability Description
Multiple absolute path traversal vulnerabilities in documentconverter in Open-Xchange (OX) AppSuite before 7.4.2-rev10 and 7.6.x before 7.6.0-rev10 allow remote attackers to read application files via a full pathname in a crafted (1) OLE Object or (2) image in an OpenDocument text file.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-5236
Credits & Attribution
No credits recorded in the NVD database.
References
More from open-xchange
View All →CVE-2022-43699
OX App Suite before 7.10.6-rev30 allows SSRF because e-mail account...
Unknown
0
CVE-2022-43698
OX App Suite before 7.10.6-rev30 allows SSRF because changing a...
Unknown
0
CVE-2022-43697
OX App Suite before 7.10.6-rev30 allows XSS via an activity...
Unknown
0
CVE-2022-43696
OX App Suite before 7.10.6-rev20 allows XSS via upsell ads....
Unknown
0
CVE-2022-37313
OX App Suite through 7.10.6 allows SSRF because the anti-SSRF...
Unknown
0
Affected Vendor
open-xchange
View all reports →Affected Software
open-xchange appsuite
Vulnerable Versions:
0, 7.4.2, 7.6.0
Timeline
Official Publish:
January 31st, 2020
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.