Test ID:	1.3.6.1.4.1.25623.1.0.806072
Category:	Web application abuses
Title:	Open-Xchange (OX) App Suite HTML Injection Vulnerability (Oct 2015)
Summary:	Open-Xchange (OX) App Suite is prone to html injection vulnerability.
Description:	Summary: Open-Xchange (OX) App Suite is prone to html injection vulnerability. Vulnerability Insight: The flaw is due to it fails to properly sanitize user-supplied input. Vulnerability Impact: Successful exploitation will allow attacker-supplied HTML and script code to run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or control how the site is rendered to the user. Other attacks are also possible. Affected Software/OS: Open-Xchange (OX) App Suite version 7.4.1 Solution: Update to version 7.4.1-rev7 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2013-7143 BugTraq ID: 65013 http://www.securityfocus.com/bid/65013 Bugtraq: 20140117 Open-Xchange Security Advisory 2014-01-17 (Google Search) http://seclists.org/bugtraq/2014/Jan/57 http://www.osvdb.org/102195 http://www.securitytracker.com/id/1029650 XForce ISS Database: openxchange-cve20137143-xss(90546) https://exchange.xforce.ibmcloud.com/vulnerabilities/90546
Copyright	Copyright (C) 2015 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.