CVE-2021-37402

open-xchange appsuite

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2021-37402

Katalog CVE

CVSS 6.1 · Medium EPSS 0,79%

Kerentanan Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') pada open-xchange appsuite. Skor CVSS 3.1 6.1 (Medium) menurut NVD.

Deskripsi (NVD)

OX App Suite before 7.10.3-rev32 and 7.10.4 before 7.10.4-rev18 allows XSS via binary data that is mishandled when the legacy dataretrieval endpoint has been enabled.

Rincian

Terbit di NVD
22 Juli 2021
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
6.1 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
EPSS (30 hari)
0,79% peluang dieksploitasi; lebih tinggi dari 55,1% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
open-xchange open-xchange appsuite Versi 7.10.3
open-xchange open-xchange appsuite Versi 7.10.3 patch_release5547
open-xchange open-xchange appsuite Versi 7.10.3 patch_release5572
open-xchange open-xchange appsuite Versi 7.10.3 patch_release5623
open-xchange open-xchange appsuite Versi 7.10.3 patch_release5653
open-xchange open-xchange appsuite Versi 7.10.3 patch_release5677
open-xchange open-xchange appsuite Versi 7.10.3 patch_release5720
open-xchange open-xchange appsuite Versi 7.10.3 rev1
open-xchange open-xchange appsuite Versi 7.10.3 rev10
open-xchange open-xchange appsuite Versi 7.10.3 rev11
open-xchange open-xchange appsuite Versi 7.10.3 rev12
open-xchange open-xchange appsuite Versi 7.10.3 rev13
open-xchange open-xchange appsuite Versi 7.10.3 rev14
open-xchange open-xchange appsuite Versi 7.10.3 rev15
open-xchange open-xchange appsuite Versi 7.10.3 rev16
open-xchange open-xchange appsuite Versi 7.10.3 rev17
open-xchange open-xchange appsuite Versi 7.10.3 rev18
open-xchange open-xchange appsuite Versi 7.10.3 rev19
open-xchange open-xchange appsuite Versi 7.10.3 rev2
open-xchange open-xchange appsuite Versi 7.10.3 rev20
open-xchange open-xchange appsuite Versi 7.10.3 rev21
open-xchange open-xchange appsuite Versi 7.10.3 rev22
open-xchange open-xchange appsuite Versi 7.10.3 rev23
open-xchange open-xchange appsuite Versi 7.10.3 rev24
open-xchange open-xchange appsuite Versi 7.10.3 rev25
open-xchange open-xchange appsuite Versi 7.10.3 rev26
open-xchange open-xchange appsuite Versi 7.10.3 rev27
open-xchange open-xchange appsuite Versi 7.10.3 rev28
open-xchange open-xchange appsuite Versi 7.10.3 rev29
open-xchange open-xchange appsuite Versi 7.10.3 rev3
open-xchange open-xchange appsuite Versi 7.10.3 rev30
open-xchange open-xchange appsuite Versi 7.10.3 rev31
open-xchange open-xchange appsuite Versi 7.10.3 rev4
open-xchange open-xchange appsuite Versi 7.10.3 rev5
open-xchange open-xchange appsuite Versi 7.10.3 rev6
open-xchange open-xchange appsuite Versi 7.10.3 rev7
open-xchange open-xchange appsuite Versi 7.10.3 rev8
open-xchange open-xchange appsuite Versi 7.10.3 rev9
open-xchange open-xchange appsuite Versi 7.10.4
open-xchange open-xchange appsuite Versi 7.10.4 rev1
open-xchange open-xchange appsuite Versi 7.10.4 rev10
open-xchange open-xchange appsuite Versi 7.10.4 rev11
open-xchange open-xchange appsuite Versi 7.10.4 rev12
open-xchange open-xchange appsuite Versi 7.10.4 rev13
open-xchange open-xchange appsuite Versi 7.10.4 rev14
open-xchange open-xchange appsuite Versi 7.10.4 rev15
open-xchange open-xchange appsuite Versi 7.10.4 rev16
open-xchange open-xchange appsuite Versi 7.10.4 rev17
open-xchange open-xchange appsuite Versi 7.10.4 rev2
open-xchange open-xchange appsuite Versi 7.10.4 rev3
open-xchange open-xchange appsuite Versi 7.10.4 rev4
open-xchange open-xchange appsuite Versi 7.10.4 rev5
open-xchange open-xchange appsuite Versi 7.10.4 rev6
open-xchange open-xchange appsuite Versi 7.10.4 rev7
open-xchange open-xchange appsuite Versi 7.10.4 rev8
open-xchange open-xchange appsuite Versi 7.10.4 rev9

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.