CVE-2013-7140

no score yetEPSS 1.8%

open-xchange open-xchange appsuite: no CVSS score yet. EPSS 1.8% chance of exploitation in the next 30 days.

XML External Entity (XXE) vulnerability in the CalDAV interface in Open-Xchange (OX) AppSuite 7.4.1 and earlier allows remote authenticated users to read portions of arbitrary files via vectors related to the SAX builder and the WebDAV interface. NOTE: this issue has been labeled as both absolute path traversal and XXE, but the root cause may be XXE, since XXE can be exploited to conduct absolute path traversal and other attacks.

EPSS: 1.8% chance of exploitation in the next 30 days; higher than 78% of CVEs (scores of 2026-10-31)
Published: 2014-01-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

open-xchange:open-xchange_appsuite

References

http://seclists.org/bugtraq/2014/Jan/57
http://www.osvdb.org/102194
http://www.securityfocus.com/bid/65015
http://www.securitytracker.com/id/1029650
https://exchange.xforce.ibmcloud.com/vulnerabilities/90543

Check your stack JSON