cve.bz

CVE-2020-15002

5.0 mediumEPSS 1.6%

Medium (5.0) in open-xchange open-xchange appsuite. EPSS 1.6% chance of exploitation in the next 30 days.

OX App Suite through 7.10.3 allows SSRF via the the /ajax/messaging/message message API.

Severity

CVSS 3.1

5.0 medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
EPSS
1.6% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
CWE
CWE-918
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON