CVE-2020-12644

low-risk

Published 2020-08-31

OX App Suite 7.10.3 and earlier allows SSRF, related to the mail account API and the /folder/list API.

Do I need to act?

0.15% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 5.0/10 Medium

NETWORK / LOW complexity

Open-Xchange Appsuite

Open-Xchange

Mailing List https://seclists.org/fulldisclosure/2020/Aug/14

Vendor Advisory https://www.open-xchange.com/

Third Party Advisory https://exchange.xforce.ibmcloud.com/vulnerabilities/187116

Mailing List https://seclists.org/fulldisclosure/2020/Aug/14

Vendor Advisory https://www.open-xchange.com/

/ 100

low-risk

Severity 20/34 · Moderate

Exploitability 1/34 · Minimal

Exposure 5/34 · Minimal