Unrated severityNVD Advisory· Published Nov 20, 2013· Updated Apr 29, 2026
CVE-2013-6074
CVE-2013-6074
Description
Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite 7.2.x before 7.2.2-rev25 and 7.4.x before 7.4.0-rev14 allows remote attackers to inject arbitrary web script or HTML via an attached SVG file.
Affected products
4cpe:2.3:a:open-xchange:open-xchange_appsuite:7.4.0:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:open-xchange:open-xchange_appsuite:7.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:open-xchange:open-xchange_appsuite:7.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:open-xchange:open-xchange_appsuite:7.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:open-xchange:open-xchange_appsuite:7.2.2:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
6- secunia.com/advisories/55575nvdVendor Advisory
- archives.neohapsis.com/archives/bugtraq/2013-11/0025.htmlnvd
- osvdb.org/99487nvd
- packetstormsecurity.com/files/123934/Open-Xchange-AppSuite-Script-Insertion.htmlnvd
- exchange.xforce.ibmcloud.com/vulnerabilities/88609nvd
- forum.open-xchange.com/showthread.phpnvd
News mentions
0No linked articles in our index yet.