Lucene search

[email protected]NVD:CVE-2018-5754

HistoryJun 16, 2018 - 1:29 a.m.

CVE-2018-5754

2018-06-1601:29:06

CWE-79

[email protected]

web.nvd.nist.gov

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

AI Score

5.4

Confidence

High

EPSS

0.001

Percentile

47.1%

JSON

Cross-site scripting (XSS) vulnerability in the office-web component in Open-Xchange OX App Suite before 7.8.3-rev12 and 7.8.4 before 7.8.4-rev9 allows remote attackers to inject arbitrary web script or HTML via a crafted presentation file, related to copying content to the clipboard.

Affected configurations

Nvd

Node

open-xchangeopen-xchange_appsuiteRange≤7.8.3

open-xchangeopen-xchange_appsuiteMatch7.8.3rev10

open-xchangeopen-xchange_appsuiteMatch7.8.3rev11

open-xchangeopen-xchange_appsuiteMatch7.8.3rev5

open-xchangeopen-xchange_appsuiteMatch7.8.3rev6

open-xchangeopen-xchange_appsuiteMatch7.8.3rev8

open-xchangeopen-xchange_appsuiteMatch7.8.3rev9

open-xchangeopen-xchange_appsuiteMatch7.8.4

open-xchangeopen-xchange_appsuiteMatch7.8.4rev3

open-xchangeopen-xchange_appsuiteMatch7.8.4rev4

open-xchangeopen-xchange_appsuiteMatch7.8.4rev5

open-xchangeopen-xchange_appsuiteMatch7.8.4rev6

open-xchangeopen-xchange_appsuiteMatch7.8.4rev7

open-xchangeopen-xchange_appsuiteMatch7.8.4rev8

VendorProductVersionCPE
open-xchangeopen-xchange_appsuite*cpe:2.3:a:open-xchange:open-xchange_appsuite:*:*:*:*:*:*:*:*
open-xchangeopen-xchange_appsuite7.8.3cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.3:rev10:*:*:*:*:*:*
open-xchangeopen-xchange_appsuite7.8.3cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.3:rev11:*:*:*:*:*:*
open-xchangeopen-xchange_appsuite7.8.3cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.3:rev5:*:*:*:*:*:*
open-xchangeopen-xchange_appsuite7.8.3cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.3:rev6:*:*:*:*:*:*
open-xchangeopen-xchange_appsuite7.8.3cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.3:rev8:*:*:*:*:*:*
open-xchangeopen-xchange_appsuite7.8.3cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.3:rev9:*:*:*:*:*:*
open-xchangeopen-xchange_appsuite7.8.4cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.4:*:*:*:*:*:*:*
open-xchangeopen-xchange_appsuite7.8.4cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.4:rev3:*:*:*:*:*:*
open-xchangeopen-xchange_appsuite7.8.4cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.4:rev4:*:*:*:*:*:*

Vendor	Product	Version	CPE
open-xchange	open-xchange_appsuite	*	cpe:2.3:a:open-xchange:open-xchange_appsuite::::::::
open-xchange	open-xchange_appsuite	7.8.3	cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.3:rev10::::::
open-xchange	open-xchange_appsuite	7.8.3	cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.3:rev11::::::
open-xchange	open-xchange_appsuite	7.8.3	cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.3:rev5::::::
open-xchange	open-xchange_appsuite	7.8.3	cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.3:rev6::::::
open-xchange	open-xchange_appsuite	7.8.3	cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.3:rev8::::::
open-xchange	open-xchange_appsuite	7.8.3	cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.3:rev9::::::
open-xchange	open-xchange_appsuite	7.8.4	cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.4:::::::*
open-xchange	open-xchange_appsuite	7.8.4	cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.4:rev3::::::
open-xchange	open-xchange_appsuite	7.8.4	cpe:2.3:a:open-xchange:open-xchange_appsuite:7.8.4:rev4::::::