ID de Prueba:	1.3.6.1.4.1.25623.1.0.806072
Categoría:	Web application abuses
Título:	Open-Xchange (OX) App Suite HTML Injection Vulnerability (Oct 2015)
Resumen:	Open-Xchange (OX) App Suite is prone to html injection vulnerability.
Descripción:	Summary: Open-Xchange (OX) App Suite is prone to html injection vulnerability. Vulnerability Insight: The flaw is due to it fails to properly sanitize user-supplied input. Vulnerability Impact: Successful exploitation will allow attacker-supplied HTML and script code to run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or control how the site is rendered to the user. Other attacks are also possible. Affected Software/OS: Open-Xchange (OX) App Suite version 7.4.1 Solution: Update to version 7.4.1-rev7 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2013-7143 BugTraq ID: 65013 http://www.securityfocus.com/bid/65013 Bugtraq: 20140117 Open-Xchange Security Advisory 2014-01-17 (Google Search) http://seclists.org/bugtraq/2014/Jan/57 http://www.osvdb.org/102195 http://www.securitytracker.com/id/1029650 XForce ISS Database: openxchange-cve20137143-xss(90546) https://exchange.xforce.ibmcloud.com/vulnerabilities/90546
Copyright	Copyright (C) 2015 Greenbone Networks GmbH

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.