CVE-2020-8544 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	6.5 MEDIUM	NETWORK	LOW	LOW	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
mitre	CNA	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 43%

Vendor	Product	Version
open-xchange	open-xchange_appsuite	7.8.4
open-xchange	open-xchange_appsuite	7.8.4:rev1
open-xchange	open-xchange_appsuite	7.8.4:rev10
open-xchange	open-xchange_appsuite	7.8.4:rev11
open-xchange	open-xchange_appsuite	7.8.4:rev12
open-xchange	open-xchange_appsuite	7.8.4:rev13
open-xchange	open-xchange_appsuite	7.8.4:rev14
open-xchange	open-xchange_appsuite	7.8.4:rev15
open-xchange	open-xchange_appsuite	7.8.4:rev16
open-xchange	open-xchange_appsuite	7.8.4:rev17
open-xchange	open-xchange_appsuite	7.8.4:rev18
open-xchange	open-xchange_appsuite	7.8.4:rev19
open-xchange	open-xchange_appsuite	7.8.4:rev2
open-xchange	open-xchange_appsuite	7.8.4:rev20
open-xchange	open-xchange_appsuite	7.8.4:rev21
open-xchange	open-xchange_appsuite	7.8.4:rev22
open-xchange	open-xchange_appsuite	7.8.4:rev23
open-xchange	open-xchange_appsuite	7.8.4:rev24
open-xchange	open-xchange_appsuite	7.8.4:rev25
open-xchange	open-xchange_appsuite	7.8.4:rev26
open-xchange	open-xchange_appsuite	7.8.4:rev27
open-xchange	open-xchange_appsuite	7.8.4:rev28
open-xchange	open-xchange_appsuite	7.8.4:rev29
open-xchange	open-xchange_appsuite	7.8.4:rev3
open-xchange	open-xchange_appsuite	7.8.4:rev30
open-xchange	open-xchange_appsuite	7.8.4:rev31
open-xchange	open-xchange_appsuite	7.8.4:rev32
open-xchange	open-xchange_appsuite	7.8.4:rev33
open-xchange	open-xchange_appsuite	7.8.4:rev34
open-xchange	open-xchange_appsuite	7.8.4:rev35
open-xchange	open-xchange_appsuite	7.8.4:rev36
open-xchange	open-xchange_appsuite	7.8.4:rev37
open-xchange	open-xchange_appsuite	7.8.4:rev38
open-xchange	open-xchange_appsuite	7.8.4:rev39
open-xchange	open-xchange_appsuite	7.8.4:rev4
open-xchange	open-xchange_appsuite	7.8.4:rev40
open-xchange	open-xchange_appsuite	7.8.4:rev41
open-xchange	open-xchange_appsuite	7.8.4:rev42
open-xchange	open-xchange_appsuite	7.8.4:rev43
open-xchange	open-xchange_appsuite	7.8.4:rev44
open-xchange	open-xchange_appsuite	7.8.4:rev45
open-xchange	open-xchange_appsuite	7.8.4:rev46
open-xchange	open-xchange_appsuite	7.8.4:rev47
open-xchange	open-xchange_appsuite	7.8.4:rev48
open-xchange	open-xchange_appsuite	7.8.4:rev49
open-xchange	open-xchange_appsuite	7.8.4:rev5
open-xchange	open-xchange_appsuite	7.8.4:rev50
open-xchange	open-xchange_appsuite	7.8.4:rev51
open-xchange	open-xchange_appsuite	7.8.4:rev52
open-xchange	open-xchange_appsuite	7.8.4:rev53
open-xchange	open-xchange_appsuite	7.8.4:rev54
open-xchange	open-xchange_appsuite	7.8.4:rev55
open-xchange	open-xchange_appsuite	7.8.4:rev56
open-xchange	open-xchange_appsuite	7.8.4:rev57
open-xchange	open-xchange_appsuite	7.8.4:rev58
open-xchange	open-xchange_appsuite	7.8.4:rev59
open-xchange	open-xchange_appsuite	7.8.4:rev6
open-xchange	open-xchange_appsuite	7.8.4:rev60
open-xchange	open-xchange_appsuite	7.8.4:rev61
open-xchange	open-xchange_appsuite	7.8.4:rev62
open-xchange	open-xchange_appsuite	7.8.4:rev63
open-xchange	open-xchange_appsuite	7.8.4:rev64
open-xchange	open-xchange_appsuite	7.8.4:rev65
open-xchange	open-xchange_appsuite	7.8.4:rev66
open-xchange	open-xchange_appsuite	7.8.4:rev67
open-xchange	open-xchange_appsuite	7.8.4:rev7
open-xchange	open-xchange_appsuite	7.8.4:rev8
open-xchange	open-xchange_appsuite	7.8.4:rev9
open-xchange	open-xchange_appsuite	7.10.1
open-xchange	open-xchange_appsuite	7.10.1:rev1
open-xchange	open-xchange_appsuite	7.10.1:rev10
open-xchange	open-xchange_appsuite	7.10.1:rev11
open-xchange	open-xchange_appsuite	7.10.1:rev12
open-xchange	open-xchange_appsuite	7.10.1:rev13
open-xchange	open-xchange_appsuite	7.10.1:rev14
open-xchange	open-xchange_appsuite	7.10.1:rev15
open-xchange	open-xchange_appsuite	7.10.1:rev16
open-xchange	open-xchange_appsuite	7.10.1:rev17
open-xchange	open-xchange_appsuite	7.10.1:rev18
open-xchange	open-xchange_appsuite	7.10.1:rev19
open-xchange	open-xchange_appsuite	7.10.1:rev2
open-xchange	open-xchange_appsuite	7.10.1:rev20
open-xchange	open-xchange_appsuite	7.10.1:rev21
open-xchange	open-xchange_appsuite	7.10.1:rev22
open-xchange	open-xchange_appsuite	7.10.1:rev23
open-xchange	open-xchange_appsuite	7.10.1:rev24
open-xchange	open-xchange_appsuite	7.10.1:rev25
open-xchange	open-xchange_appsuite	7.10.1:rev26
open-xchange	open-xchange_appsuite	7.10.1:rev27
open-xchange	open-xchange_appsuite	7.10.1:rev3
open-xchange	open-xchange_appsuite	7.10.1:rev4
open-xchange	open-xchange_appsuite	7.10.1:rev5
open-xchange	open-xchange_appsuite	7.10.1:rev6
open-xchange	open-xchange_appsuite	7.10.1:rev7
open-xchange	open-xchange_appsuite	7.10.1:rev8
open-xchange	open-xchange_appsuite	7.10.1:rev9
open-xchange	open-xchange_appsuite	7.10.2
open-xchange	open-xchange_appsuite	7.10.2:rev1
open-xchange	open-xchange_appsuite	7.10.2:rev10
open-xchange	open-xchange_appsuite	7.10.2:rev11
open-xchange	open-xchange_appsuite	7.10.2:rev12
open-xchange	open-xchange_appsuite	7.10.2:rev13
open-xchange	open-xchange_appsuite	7.10.2:rev14
open-xchange	open-xchange_appsuite	7.10.2:rev15
open-xchange	open-xchange_appsuite	7.10.2:rev16
open-xchange	open-xchange_appsuite	7.10.2:rev17
open-xchange	open-xchange_appsuite	7.10.2:rev18
open-xchange	open-xchange_appsuite	7.10.2:rev19
open-xchange	open-xchange_appsuite	7.10.2:rev2
open-xchange	open-xchange_appsuite	7.10.2:rev20
open-xchange	open-xchange_appsuite	7.10.2:rev21
open-xchange	open-xchange_appsuite	7.10.2:rev3
open-xchange	open-xchange_appsuite	7.10.2:rev4
open-xchange	open-xchange_appsuite	7.10.2:rev5
open-xchange	open-xchange_appsuite	7.10.2:rev6
open-xchange	open-xchange_appsuite	7.10.2:rev7
open-xchange	open-xchange_appsuite	7.10.2:rev8
open-xchange	open-xchange_appsuite	7.10.2:rev9
open-xchange	open-xchange_appsuite	7.10.3
open-xchange	open-xchange_appsuite	7.10.3:rev1
open-xchange	open-xchange_appsuite	7.10.3:rev2
open-xchange	open-xchange_appsuite	7.10.3:rev3
open-xchange	open-xchange_appsuite	7.10.3:rev4
open-xchange	open-xchange_appsuite	7.10.3:rev5
open-xchange	open-xchange_appsuite	7.10.3:rev6

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-918 - Server-Side Request Forgery (SSRF)
The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

References

https://packetstormsecurity.com/files/158070/OX-App-Suite-OX-Documents-7.10.3-XSS-SSRF-Improper-Validation.html

https://www.open-xchange.com/

https://packetstormsecurity.com/files/158070/OX-App-Suite-OX-Documents-7.10.3-XSS-SSRF-Improper-Validation.html

https://www.open-xchange.com/