CVE-2022-43697

open-xchange ox app suite

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2022-43697

Katalog CVE

CVSS 6.1 · Medium EPSS 0,43%

Kerentanan Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') pada open-xchange ox app suite. Skor CVSS 3.1 6.1 (Medium) menurut NVD.

Deskripsi (NVD)

OX App Suite before 7.10.6-rev30 allows XSS via an activity tracking adapter defined by jslob.

Rincian

Terbit di NVD
15 April 2023
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
6.1 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
EPSS (30 hari)
0,43% peluang dieksploitasi; lebih tinggi dari 35,3% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
open-xchange ox app suite Semua versi sebelum 7.10.6
open-xchange ox app suite Versi 7.10.6
open-xchange ox app suite Versi 7.10.6 rev01
open-xchange ox app suite Versi 7.10.6 rev02
open-xchange ox app suite Versi 7.10.6 rev03
open-xchange ox app suite Versi 7.10.6 rev04
open-xchange ox app suite Versi 7.10.6 rev05
open-xchange ox app suite Versi 7.10.6 rev06
open-xchange ox app suite Versi 7.10.6 rev07
open-xchange ox app suite Versi 7.10.6 rev08
open-xchange ox app suite Versi 7.10.6 rev09
open-xchange ox app suite Versi 7.10.6 rev10
open-xchange ox app suite Versi 7.10.6 rev11
open-xchange ox app suite Versi 7.10.6 rev12
open-xchange ox app suite Versi 7.10.6 rev13
open-xchange ox app suite Versi 7.10.6 rev14
open-xchange ox app suite Versi 7.10.6 rev15
open-xchange ox app suite Versi 7.10.6 rev16
open-xchange ox app suite Versi 7.10.6 rev17
open-xchange ox app suite Versi 7.10.6 rev18
open-xchange ox app suite Versi 7.10.6 rev19
open-xchange ox app suite Versi 7.10.6 rev20
open-xchange ox app suite Versi 7.10.6 rev21
open-xchange ox app suite Versi 7.10.6 rev22
open-xchange ox app suite Versi 7.10.6 rev23
open-xchange ox app suite Versi 7.10.6 rev24
open-xchange ox app suite Versi 7.10.6 rev25
open-xchange ox app suite Versi 7.10.6 rev26
open-xchange ox app suite Versi 7.10.6 rev27
open-xchange ox app suite Versi 7.10.6 rev28
open-xchange ox app suite Versi 7.10.6 rev29

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.