Security Advisory

CVE-2014-7871

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2014-11-21 15:00:00
Last updated 2024-08-06 13:03:27
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

SQL injection vulnerability in Open-Xchange (OX) AppSuite before 7.4.2-rev36 and 7.6.x before 7.6.0-rev23 allows remote authenticated users to execute arbitrary SQL commands via a crafted jslob API call.