CVE-2018-5753

The frontend component in Open-Xchange OX App Suite before 7.6.3-rev31, 7.8.x before 7.8.2-rev31, 7.8.3 before 7.8.3-rev41, and 7.8.4 before 7.8.4-rev20 allows remote attackers to spoof the origin of e-mails via unicode characters in the "personal part" of a (1) From or (2) Sender address.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.5 MEDIUM
NETWORK
LOW
LOW
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 83%
VendorProductVersion
open-xchangeopen-xchange_appsuite
𝑥
≤ 7.6.3
open-xchangeopen-xchange_appsuite
7.6.3:rev14
open-xchangeopen-xchange_appsuite
7.6.3:rev15
open-xchangeopen-xchange_appsuite
7.6.3:rev16
open-xchangeopen-xchange_appsuite
7.6.3:rev17
open-xchangeopen-xchange_appsuite
7.6.3:rev18
open-xchangeopen-xchange_appsuite
7.6.3:rev20
open-xchangeopen-xchange_appsuite
7.6.3:rev22
open-xchangeopen-xchange_appsuite
7.6.3:rev23
open-xchangeopen-xchange_appsuite
7.6.3:rev24
open-xchangeopen-xchange_appsuite
7.6.3:rev25
open-xchangeopen-xchange_appsuite
7.6.3:rev26
open-xchangeopen-xchange_appsuite
7.6.3:rev28
open-xchangeopen-xchange_appsuite
7.6.3:rev29
open-xchangeopen-xchange_appsuite
7.6.3:rev30
open-xchangeopen-xchange_appsuite
7.8.0
open-xchangeopen-xchange_appsuite
7.8.2
open-xchangeopen-xchange_appsuite
7.8.3
open-xchangeopen-xchange_appsuite
7.8.3:rev10
open-xchangeopen-xchange_appsuite
7.8.3:rev11
open-xchangeopen-xchange_appsuite
7.8.3:rev12
open-xchangeopen-xchange_appsuite
7.8.3:rev13
open-xchangeopen-xchange_appsuite
7.8.3:rev14
open-xchangeopen-xchange_appsuite
7.8.3:rev15
open-xchangeopen-xchange_appsuite
7.8.3:rev16
open-xchangeopen-xchange_appsuite
7.8.3:rev17
open-xchangeopen-xchange_appsuite
7.8.3:rev18
open-xchangeopen-xchange_appsuite
7.8.3:rev19
open-xchangeopen-xchange_appsuite
7.8.3:rev20
open-xchangeopen-xchange_appsuite
7.8.3:rev21
open-xchangeopen-xchange_appsuite
7.8.3:rev22
open-xchangeopen-xchange_appsuite
7.8.3:rev23
open-xchangeopen-xchange_appsuite
7.8.3:rev24
open-xchangeopen-xchange_appsuite
7.8.3:rev25
open-xchangeopen-xchange_appsuite
7.8.3:rev26
open-xchangeopen-xchange_appsuite
7.8.3:rev27
open-xchangeopen-xchange_appsuite
7.8.3:rev28
open-xchangeopen-xchange_appsuite
7.8.3:rev29
open-xchangeopen-xchange_appsuite
7.8.3:rev30
open-xchangeopen-xchange_appsuite
7.8.3:rev31
open-xchangeopen-xchange_appsuite
7.8.3:rev32
open-xchangeopen-xchange_appsuite
7.8.3:rev33
open-xchangeopen-xchange_appsuite
7.8.3:rev34
open-xchangeopen-xchange_appsuite
7.8.3:rev35
open-xchangeopen-xchange_appsuite
7.8.3:rev36
open-xchangeopen-xchange_appsuite
7.8.3:rev38
open-xchangeopen-xchange_appsuite
7.8.3:rev39
open-xchangeopen-xchange_appsuite
7.8.3:rev40
open-xchangeopen-xchange_appsuite
7.8.3:rev5
open-xchangeopen-xchange_appsuite
7.8.3:rev6
open-xchangeopen-xchange_appsuite
7.8.3:rev8
open-xchangeopen-xchange_appsuite
7.8.3:rev9
open-xchangeopen-xchange_appsuite
7.8.4
open-xchangeopen-xchange_appsuite
7.8.4:rev10
open-xchangeopen-xchange_appsuite
7.8.4:rev11
open-xchangeopen-xchange_appsuite
7.8.4:rev13
open-xchangeopen-xchange_appsuite
7.8.4:rev14
open-xchangeopen-xchange_appsuite
7.8.4:rev15
open-xchangeopen-xchange_appsuite
7.8.4:rev16
open-xchangeopen-xchange_appsuite
7.8.4:rev17
open-xchangeopen-xchange_appsuite
7.8.4:rev18
open-xchangeopen-xchange_appsuite
7.8.4:rev19
open-xchangeopen-xchange_appsuite
7.8.4:rev3
open-xchangeopen-xchange_appsuite
7.8.4:rev4
open-xchangeopen-xchange_appsuite
7.8.4:rev5
open-xchangeopen-xchange_appsuite
7.8.4:rev6
open-xchangeopen-xchange_appsuite
7.8.4:rev7
open-xchangeopen-xchange_appsuite
7.8.4:rev8
open-xchangeopen-xchange_appsuite
7.8.4:rev9
𝑥
= Vulnerable software versions