Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2016-4047
HistoryDec 15, 2016 - 6:59 a.m.

CVE-2016-4047

2016-12-1506:59:11
CWE-200
CWE-611
mitre
web.nvd.nist.gov
23
4
cve-2016-4047
open-xchange
ox app suite
security vulnerability
document tracking
information exposure
nvd

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

4.4

Confidence

High

EPSS

0.001

Percentile

21.6%

JSON

An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev8. References to external Open XML document type definitions (.dtd resources) can be placed within .docx and .xslx files. Those resources were requested when parsing certain parts of the generated document. As a result an attacker can track access to a manipulated document. Usage of a document may get tracked and information about internal infrastructure may get exposed.

Affected configurations

Nvd
Node
open-xchangeopen-xchange_appsuiteRange≤7.8.1rev7
VendorProductVersionCPE
open-xchangeopen-xchange_appsuite*cpe:2.3:a:open-xchange:open-xchange_appsuite:*:rev7:*:*:*:*:*:*

Social References

More

Related

nvd 1
prion 1
cvelist 1
openvas 1
packetstorm 1
nvd
nvd
CVE-2016-4047
2016-12-15 06:59:11
prion
prion
Xxe
2016-12-15 06:59:00
cvelist
cvelist
CVE-2016-4047
2016-12-15 06:31:00
openvas
openvas
Open-Xchange (OX) App Suite XML External Entity Information Disclosure Vulnerability
2017-01-02 00:00:00
packetstorm
packetstorm
Open-Xchange App Suite 7.8.1 Information Disclosure
2016-06-22 00:00:00

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

4.4

Confidence

High

EPSS

0.001

Percentile

21.6%

JSON
Related for CVE-2016-4047
nvd1prion1cvelist1openvas1packetstorm1