Browse all 5 CVE security advisories affecting Open-Xchange. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Open-Xchange provides secure collaboration and email solutions for enterprises, focusing on on-premise and hybrid cloud deployments. Historically, its vulnerabilities have included remote code execution, cross-site scripting, and privilege escalation, often stemming from input validation flaws and improper access controls. The platform has faced security incidents, including a 2020 vulnerability (CVE-2020-26247) allowing authenticated RCE via file uploads. While maintaining compliance with standards like GDPR, Open-Xchange continues to address security challenges through regular updates and penetration testing, though its CVE history indicates ongoing need for robust input sanitization and secure coding practices across its web interfaces and API endpoints.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2016-7068 | PowerDNS Authoritative Server和PowerDNS Recursor 安全漏洞 — pdnsCWE-20 | 7.5 | - | 2018-09-11 |
| CVE-2016-7069 | dnsdist 安全漏洞 — dnsdistCWE-20 | 7.5 | - | 2018-09-11 |
| CVE-2016-7073 | PowerDNS Authoritative Server和PowerDNS Recursor 安全漏洞 — pdnsCWE-20 | 5.9 | - | 2018-09-11 |
| CVE-2016-7074 | PowerDNS Authoritative Server和PowerDNS Recursor 安全漏洞 — pdnsCWE-20 | 5.9 | - | 2018-09-11 |
| CVE-2016-7072 | PowerDNS Authoritative Server 安全漏洞 — pdnsCWE-20 | 7.5 | - | 2018-09-10 |
This page lists every published CVE security advisory associated with Open-Xchange. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.