CVE-2019-16717

OX App Suite through 7.10.2 has XSS.

• CWE-79

• http://packetstormsecurity.com/files/155813/OX-App-Suite-7.10.2-Cross-Site-Scripting-Improper-Access-Control.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2020/Jan/7Exploit, Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2020/Jan/7Exploit, Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2020/Jan/7Exploit, Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2020/Jan/7Exploit, Mailing List, Third Party Advisory
• https://www.open-xchange.com/Product
• http://packetstormsecurity.com/files/155813/OX-App-Suite-7.10.2-Cross-Site-Scripting-Improper-Access-Control.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2020/Jan/7Exploit, Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2020/Jan/7Exploit, Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2020/Jan/7Exploit, Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2020/Jan/7Exploit, Mailing List, Third Party Advisory
• https://www.open-xchange.com/Product

Published

Jan 6, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-16710ImageMagick 7.0.8-35 has a memory leak in coders/dot.c, as d…6.5
• CVE-2019-16711ImageMagick 7.0.8-40 has a memory leak in Huffman2DEncodeIma…6.5
• CVE-2019-16712ImageMagick 7.0.8-43 has a memory leak in Huffman2DEncodeIma…6.5
• CVE-2019-16713ImageMagick 7.0.8-43 has a memory leak in coders/dot.c, as d…6.5
• CVE-2019-16714In the Linux kernel before 5.2.14, rds6_inc_info_copy in net…7.5
• CVE-2019-16716OX App Suite through 7.10.2 has Incorrect Access Control.6.6
• CVE-2019-16718In radare2 before 3.9.0, a command injection vulnerability e…7.8
• CVE-2019-16719WTCMS 1.0 allows index.php?g=admin&m=index&a=index CSRF with…6.5
• CVE-2019-1672A vulnerability in the Decryption Policy Default Action func…5.8
• CVE-2019-16720ZZZCMS zzzphp v1.7.2 does not properly restrict file upload …7.5
• CVE-2019-16721NoneCMS v1.3 has CSRF in public/index.php/admin/admin/dele.h…6.5
• CVE-2019-16722ZZZCMS zzzphp v1.7.2 has an insufficient protection mechanis…9.8