// For flags

CVE-2018-5752

OX App Suite 7.8.4 - Multiple Vulnerabilities

Severity Score

8.8
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

3
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

The backend component in Open-Xchange OX App Suite before 7.6.3-rev36, 7.8.x before 7.8.2-rev39, 7.8.3 before 7.8.3-rev44, and 7.8.4 before 7.8.4-rev22 allows remote attackers to conduct server-side request forgery (SSRF) attacks via vectors involving non-decimal representations of IP addresses and special IPv6 related addresses.

El componente backend en Open-Xchange OX App Suite en versiones anteriores a la 7.6.3-rev36, versiones 7.8.x anteriores a la 7.8.2-rev39, versiones 7.8.3 anteriores a la 7.8.3-rev44 y versiones 7.8.4 anteriores a la 7.8.4-rev22 permite que atacantes remotos realicen ataques de Server-Side Request Forgery (SSRF) mediante vectores relacionados con representaciones no decimales de direcciones IP y direcciones IPv6 relacionadas especiales.

OX App Suite versions 7.8.4 and below suffer from cross site scripting, improper privilege management, content spoofing, server-side request forgery, and path traversal vulnerabilities.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Network
Attack Complexity
Low
Authentication
Single
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2018-01-17 CVE Reserved
  • 2018-06-08 CVE Published
  • 2024-08-05 CVE Updated
  • 2024-08-05 First Exploit
  • 2024-08-10 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
  • CWE-918: Server-Side Request Forgery (SSRF)
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
<= 7.6.3
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version " <= 7.6.3"
-
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.6.3
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.6.3"
rev14
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.6.3
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.6.3"
rev15
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.6.3
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.6.3"
rev16
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.6.3
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.6.3"
rev17
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.6.3
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.6.3"
rev18
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.6.3
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.6.3"
rev20
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.6.3
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.6.3"
rev22
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.6.3
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.6.3"
rev23
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.6.3
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.6.3"
rev24
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.6.3
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.6.3"
rev25
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.6.3
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.6.3"
rev26
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.6.3
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.6.3"
rev28
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.6.3
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.6.3"
rev29
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.6.3
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.6.3"
rev30
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.6.3
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.6.3"
rev31
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.6.3
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.6.3"
rev32
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.6.3
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.6.3"
rev33
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.6.3
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.6.3"
rev35
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.0
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.0"
-
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.2
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.2"
-
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.3
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.3"
-
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.3
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.3"
rev10
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.3
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.3"
rev11
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.3
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.3"
rev12
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.3
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.3"
rev13
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.3
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.3"
rev14
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.3
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.3"
rev15
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.3
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.3"
rev16
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.3
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.3"
rev17
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.3
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.3"
rev18
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.3
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.3"
rev19
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.3
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.3"
rev20
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.3
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.3"
rev21
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.3
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.3"
rev22
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.3
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.3"
rev23
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.3
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.3"
rev24
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.3
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.3"
rev25
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.3
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.3"
rev26
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.3
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.3"
rev27
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.3
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.3"
rev28
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.3
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.3"
rev29
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.3
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.3"
rev30
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.3
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.3"
rev31
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.3
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.3"
rev32
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.3
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.3"
rev33
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.3
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.3"
rev34
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.3
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.3"
rev35
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.3
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.3"
rev36
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.3
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.3"
rev38
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.3
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.3"
rev39
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.3
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.3"
rev40
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.3
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.3"
rev41
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.3
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.3"
rev42
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.3
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.3"
rev43
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.3
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.3"
rev5
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.3
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.3"
rev6
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.3
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.3"
rev8
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.3
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.3"
rev9
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.4
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.4"
-
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.4
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.4"
rev10
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.4
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.4"
rev11
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.4
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.4"
rev13
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.4
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.4"
rev14
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.4
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.4"
rev15
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.4
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.4"
rev16
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.4
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.4"
rev17
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.4
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.4"
rev18
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.4
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.4"
rev19
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.4
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.4"
rev20
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.4
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.4"
rev21
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.4
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.4"
rev3
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.4
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.4"
rev4
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.4
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.4"
rev5
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.4
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.4"
rev6
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.4
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.4"
rev7
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.4
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.4"
rev8
Affected
Open-xchange
Search vendor "Open-xchange"
Open-xchange Appsuite
Search vendor "Open-xchange" for product "Open-xchange Appsuite"
7.8.4
Search vendor "Open-xchange" for product "Open-xchange Appsuite" and version "7.8.4"
rev9
Affected