Unrated severityNVD Advisory· Published Nov 20, 2013· Updated Jun 16, 2026
CVE-2013-6074
CVE-2013-6074
Description
Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite 7.2.x before 7.2.2-rev25 and 7.4.x before 7.4.0-rev14 allows remote attackers to inject arbitrary web script or HTML via an attached SVG file.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5cpe:2.3:a:open-xchange:open-xchange_appsuite:7.2.0:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:open-xchange:open-xchange_appsuite:7.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:open-xchange:open-xchange_appsuite:7.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:open-xchange:open-xchange_appsuite:7.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:open-xchange:open-xchange_appsuite:7.4.0:*:*:*:*:*:*:*
- (no CPE)range: <7.2.2-rev25, <7.4.0-rev14
Patches
Vulnerability mechanics
References
6- secunia.com/advisories/55575nvdVendor Advisory
- archives.neohapsis.com/archives/bugtraq/2013-11/0025.htmlnvd
- osvdb.org/99487nvd
- packetstormsecurity.com/files/123934/Open-Xchange-AppSuite-Script-Insertion.htmlnvd
- exchange.xforce.ibmcloud.com/vulnerabilities/88609nvd
- forum.open-xchange.com/showthread.phpnvd
News mentions
0No linked articles in our index yet.