Vendor
Open-Xchange
77 known vulnerabilities.
53 results · Clear filters · Feed
-
Medium 6.5
An attacker that has valid credentials can send crafted compressed data that causes the affected process to exhaust its…
-
Medium 6.5
An attacker that has valid credentials can select a compression algorithm for the IMAP connection whose decompression s…
-
Medium 4.3
A host listed as a trusted proxy can send forwarding information containing a NUL byte, which crashes the login process…
-
Medium 4.3
An attacker that has valid credentials can send an invalid IMAP URLFETCH command, which causes uninitialized memory to …
-
Medium 4.3
Forwarding information received from a host listed as a trusted proxy is not kept separate from Dovecot's own authentic…
-
Medium 5.9
An attacker that holds an OAuth2 token granting only part of the required scopes can authenticate, because when more th…
-
Medium 5.9
An unauthenticated attacker can send a truncated quoted argument to the ManageSieve login process, which makes it spin …
-
Medium 6.5
An attacker that can send mail to a user can craft a message header whose values are chosen to collide in an internal h…
-
Medium 4.3
An attacker that has valid credentials can open many connections to the imap-hibernate service and send invalid command…
-
Medium 6.5
An attacker that can send mail to a user can craft a message header that makes the IMAP THREAD command consume CPU disp…
-
Medium 4.3
An attacker that has valid credentials can submit a Sieve script containing an extreme numeric literal, which causes an…
-
Medium 4.3
An attacker that has valid credentials can use IMAP LIST command to consume CPU. This can cause degradation or denial o…
-
Medium 4.8
Mail content stored by a user can be crafted so that it is interpreted as dsync protocol commands when an administrator…
-
Medium 5.9
An attacker that can get Dovecot to relay a message, for example through Sieve redirect or submission relay, can use a …
-
Medium 4.3
When mail_max_userip_connections is set (default 10) and reached, submission-login can crash with epoll() panic caused …
-
Medium 4.3
An attacker can cause uncontrolled memory usage with excessive bracing over IMAP. The fix in CVE-2026-27857 was incompl…
-
Medium 5.3
Attacker can upload a malicious Sieve script over ManageSieve service (or locally) to bypass configured CPU time limits…
-
Medium 6.8
Attacker can use a specially crafted base64 exchange between Dovecot and Client to fake SCRAM TLS channel binding. This…
-
Medium 5.3
A mail message containing excessive amount of RFC 2231 MIME parameters causes LMTP to use too much CPU. A suitably form…
-
Medium 4.3
Sending "NOOP (((...)))" command with 4000 parenthesis open+close results in ~1MB extra memory usage. Longer commands w…
-
Medium 6.8
Dovecot OTP authentication is vulnerable to replay attack under specific conditions. If auth cache is enabled, and user…
-
Medium 5.3
When dovecot has been configured to use per-domain passwd files, and they are placed one path component above /etc, or …
-
Medium 5.3
When sending invalid base64 SASL data, login process is disconnected from the auth server, causing all active authentic…
-
Medium 4.3
Dovecot has provided a script to use for attachment to text conversion. This script unsafely handles zip-style attachme…
-
Medium 6.1
Malicious e-mail content can be used to execute script code. Unintended actions can be executed in the context of the u…
-
Medium 5.4
Malicious content uploaded as file can be used to execute script code when following attacker-controlled links. Uninten…
-
Medium 5.4
Malicious content at office documents can be used to inject script code when editing a document. Unintended actions can…
-
Medium 5.4
Malicious content uploaded as file can be used to execute script code when following attacker-controlled links. Uninten…
-
Medium 5.4
Malicious content from E-Mail can be used to perform a redressing attack. Users can be tricked to perform unintended ac…
-
Medium 5.0
Having a large number of address headers (From, To, Cc, Bcc, etc.) becomes excessively CPU intensive. With 100k header …
-
Medium 5.3
Dovecot accepts dot LF DOT LF symbol as end of DATA command. RFC requires that it should always be CR LF DOT CR LF. Thi…
-
Medium 5.4
Module savepoints could be abused to inject references to malicious code delivered through the same domain. Attackers c…
-
Medium 5.3
E-Mails exported as PDF were stored in a cache that did not consider specific session information for the related user …
-
Medium 6.5
Maliciously crafted E-Mail attachment names could be used to temporarily execute script code in the context of the user…
-
Medium 6.5
Content-ID based embedding of resources in E-Mails could be abused to trigger client-side script code when using the "s…
-
Medium 6.5
E-Mail containing malicious display-name information could trigger client-side script execution when using specific mob…
-
Medium 6.1
RSS feeds that contain malicious data- attributes could be abused to inject script code to a users browser session when…
-
Medium 5.4
Upsell shop information of an account can be manipulated to execute script code in the context of the users browser ses…
-
Medium 5.4
Upsell advertisement information of an account can be manipulated to execute script code in the context of the users br…
-
Medium 5.4
Embedded content references at tasks could be used to temporarily execute script code in the context of the users brows…