CVE-2017-6912

Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Incorrect Access Control.

• CWE-284

• http://open-xchange.comVendor Advisory
• http://ox.comBroken Link, Not Applicable
• https://documentation.open-xchange.com/7.10.0/release-notes/release-notes.htmlRelease Notes, Vendor Advisory
• http://open-xchange.comVendor Advisory
• http://ox.comBroken Link, Not Applicable
• https://documentation.open-xchange.com/7.10.0/release-notes/release-notes.htmlRelease Notes, Vendor Advisory

Published

May 22, 2019

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-6906An issue was discovered in SiberianCMS before 4.10.0. The v…
• CVE-2017-6907An issue was discovered in Open.GL before 2017-03-13. The vu…
• CVE-2017-6908An issue was discovered in concrete5 <= 5.6.3.4. The vulnera…
• CVE-2017-6909An issue was discovered in Shimmie <= 2.5.1. The vulnerabili…
• CVE-2017-6910The HTTP and WebSocket engine components in the server in Ka…
• CVE-2017-6911USB Pratirodh is prone to sensitive information disclosure. …
• CVE-2017-6913Cross-site scripting (XSS) vulnerability in the Open-Xchange…
• CVE-2017-6914CSRF exists in BigTree CMS 4.1.18 and 4.2.16 with the id par…
• CVE-2017-6915CSRF exists in BigTree CMS 4.1.18 with the colophon paramete…
• CVE-2017-6916CSRF exists in BigTree CMS 4.1.18 with the nav-social[#] par…
• CVE-2017-6917CSRF exists in BigTree CMS 4.2.16 with the value parameter t…
• CVE-2017-6918CSRF exists in BigTree CMS 4.2.16 with the value[#][*] param…