CVE-2017-13667

OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: SSRF.

• CWE-918

• http://ox.comBroken Link, Not Applicable
• https://documentation.open-xchange.com/7.8.3/release-notes/release-notes.htmlRelease Notes, Vendor Advisory
• http://ox.comBroken Link, Not Applicable
• https://documentation.open-xchange.com/7.8.3/release-notes/release-notes.htmlRelease Notes, Vendor Advisory

Published

May 23, 2019

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-13657Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2017-13658In ImageMagick before 6.9.9-3 and 7.x before 7.0.6-3, there …
• CVE-2017-1366IBM Security Identity Governance Virtual Appliance 5.2 throu…5.9
• CVE-2017-13663Encryption key exposure in firmware in iSmartAlarm CubeOne v…
• CVE-2017-13664Password file exposure in firmware in iSmartAlarm CubeOne ve…
• CVE-2017-13666An integer underflow vulnerability exists in pixel-a.asm, th…
• CVE-2017-13668OX Software GmbH OX App Suite 7.8.4 and earlier is affected …
• CVE-2017-13669SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the …
• CVE-2017-1367IBM Security Identity Governance and Intelligence Virtual Ap…3.7
• CVE-2017-13670In BlackCat CMS 1.2, remote authenticated users can upload a…
• CVE-2017-13671app/View/Helper/CommandHelper.php in MISP before 2.4.79 has …
• CVE-2017-13672QEMU (aka Quick Emulator), when built with the VGA display e…5.5