CVE-2018-5751

The backend component in Open-Xchange OX App Suite before 7.6.3-rev36, 7.8.x before 7.8.2-rev39, 7.8.3 before 7.8.3-rev44, and 7.8.4 before 7.8.4-rev22 allows remote authenticated users to obtain sensitive information about external guest users via vectors related to the "groups" and "users" APIs.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.5 MEDIUM
NETWORK
LOW
LOW
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 82%
VendorProductVersion
open-xchangeopen-xchange_appsuite
𝑥
≤ 7.6.3
open-xchangeopen-xchange_appsuite
7.6.3:rev14
open-xchangeopen-xchange_appsuite
7.6.3:rev15
open-xchangeopen-xchange_appsuite
7.6.3:rev16
open-xchangeopen-xchange_appsuite
7.6.3:rev17
open-xchangeopen-xchange_appsuite
7.6.3:rev18
open-xchangeopen-xchange_appsuite
7.6.3:rev20
open-xchangeopen-xchange_appsuite
7.6.3:rev22
open-xchangeopen-xchange_appsuite
7.6.3:rev23
open-xchangeopen-xchange_appsuite
7.6.3:rev24
open-xchangeopen-xchange_appsuite
7.6.3:rev25
open-xchangeopen-xchange_appsuite
7.6.3:rev26
open-xchangeopen-xchange_appsuite
7.6.3:rev28
open-xchangeopen-xchange_appsuite
7.6.3:rev29
open-xchangeopen-xchange_appsuite
7.6.3:rev30
open-xchangeopen-xchange_appsuite
7.6.3:rev31
open-xchangeopen-xchange_appsuite
7.6.3:rev32
open-xchangeopen-xchange_appsuite
7.6.3:rev33
open-xchangeopen-xchange_appsuite
7.6.3:rev35
open-xchangeopen-xchange_appsuite
7.8.0
open-xchangeopen-xchange_appsuite
7.8.2
open-xchangeopen-xchange_appsuite
7.8.3
open-xchangeopen-xchange_appsuite
7.8.3:rev10
open-xchangeopen-xchange_appsuite
7.8.3:rev11
open-xchangeopen-xchange_appsuite
7.8.3:rev12
open-xchangeopen-xchange_appsuite
7.8.3:rev13
open-xchangeopen-xchange_appsuite
7.8.3:rev14
open-xchangeopen-xchange_appsuite
7.8.3:rev15
open-xchangeopen-xchange_appsuite
7.8.3:rev16
open-xchangeopen-xchange_appsuite
7.8.3:rev17
open-xchangeopen-xchange_appsuite
7.8.3:rev18
open-xchangeopen-xchange_appsuite
7.8.3:rev19
open-xchangeopen-xchange_appsuite
7.8.3:rev20
open-xchangeopen-xchange_appsuite
7.8.3:rev21
open-xchangeopen-xchange_appsuite
7.8.3:rev22
open-xchangeopen-xchange_appsuite
7.8.3:rev23
open-xchangeopen-xchange_appsuite
7.8.3:rev24
open-xchangeopen-xchange_appsuite
7.8.3:rev25
open-xchangeopen-xchange_appsuite
7.8.3:rev26
open-xchangeopen-xchange_appsuite
7.8.3:rev27
open-xchangeopen-xchange_appsuite
7.8.3:rev28
open-xchangeopen-xchange_appsuite
7.8.3:rev29
open-xchangeopen-xchange_appsuite
7.8.3:rev30
open-xchangeopen-xchange_appsuite
7.8.3:rev31
open-xchangeopen-xchange_appsuite
7.8.3:rev32
open-xchangeopen-xchange_appsuite
7.8.3:rev33
open-xchangeopen-xchange_appsuite
7.8.3:rev34
open-xchangeopen-xchange_appsuite
7.8.3:rev35
open-xchangeopen-xchange_appsuite
7.8.3:rev36
open-xchangeopen-xchange_appsuite
7.8.3:rev38
open-xchangeopen-xchange_appsuite
7.8.3:rev39
open-xchangeopen-xchange_appsuite
7.8.3:rev40
open-xchangeopen-xchange_appsuite
7.8.3:rev41
open-xchangeopen-xchange_appsuite
7.8.3:rev42
open-xchangeopen-xchange_appsuite
7.8.3:rev43
open-xchangeopen-xchange_appsuite
7.8.3:rev5
open-xchangeopen-xchange_appsuite
7.8.3:rev6
open-xchangeopen-xchange_appsuite
7.8.3:rev8
open-xchangeopen-xchange_appsuite
7.8.3:rev9
open-xchangeopen-xchange_appsuite
7.8.4
open-xchangeopen-xchange_appsuite
7.8.4:rev10
open-xchangeopen-xchange_appsuite
7.8.4:rev11
open-xchangeopen-xchange_appsuite
7.8.4:rev13
open-xchangeopen-xchange_appsuite
7.8.4:rev14
open-xchangeopen-xchange_appsuite
7.8.4:rev15
open-xchangeopen-xchange_appsuite
7.8.4:rev16
open-xchangeopen-xchange_appsuite
7.8.4:rev17
open-xchangeopen-xchange_appsuite
7.8.4:rev18
open-xchangeopen-xchange_appsuite
7.8.4:rev19
open-xchangeopen-xchange_appsuite
7.8.4:rev20
open-xchangeopen-xchange_appsuite
7.8.4:rev21
open-xchangeopen-xchange_appsuite
7.8.4:rev3
open-xchangeopen-xchange_appsuite
7.8.4:rev4
open-xchangeopen-xchange_appsuite
7.8.4:rev5
open-xchangeopen-xchange_appsuite
7.8.4:rev6
open-xchangeopen-xchange_appsuite
7.8.4:rev7
open-xchangeopen-xchange_appsuite
7.8.4:rev8
open-xchangeopen-xchange_appsuite
7.8.4:rev9
𝑥
= Vulnerable software versions