Open-Xchange: >> Open-Xchange Security Vulnerabilities
The open source version of Open-Xchange 0.8.2 and earlier uses a static default username and password with a valid login shell in the initfile for the ldap-server, which allows remote attackers to access any server where the default has not been changed.
CVSS Score
7.5
EPSS Score
0.012
Published
2006-06-01
Cross-site scripting (XSS) vulnerability in webmail in Open-Xchange 0.8.1-6 and earlier, with "Inline HTML" enabled, allows remote attackers to inject arbitrary web script or HTML via e-mail attachments, which are rendered inline.
CVSS Score
4.3
EPSS Score
0.003
Published
2006-01-05