CVE-2014-7871
SQL injection vulnerability in Open-Xchange (OX) AppSuite before 7.4.2-rev36 and 7.6.x before 7.6.0-rev23 allows remote authenticated users to execute arbitrary SQL commands via a crafted jslob API call.
- EPSS
- 1.6% chance of exploitation in the next 30 days; higher than 76% of CVEs (scores of 2026-10-31)
- CWE
- CWE-89
- Published
- Modified
- Record from
- the NVD, synced
Affected
- open-xchange:open-xchange_appsuite
References
- http://packetstormsecurity.com/files/129020/OX-App-Suite-7.6.0-SQL-Injection.html
- http://www.securityfocus.com/archive/1/533936/100/0/threaded
- http://www.securityfocus.com/bid/70982
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98563
- http://packetstormsecurity.com/files/129020/OX-App-Suite-7.6.0-SQL-Injection.html