CVE-2014-2077

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-03-20 · updated 2026-06-17
Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in the frontend in Open-Xchange (OX) AppSuite 7.4.1 before 7.4.1-rev10 and 7.4.2 before 7.4.2-rev8 allows remote attackers to inject arbitrary web script or HTML via the subject of an email, involving 'the aria "tags" for screenreaders at the top bar'.

Affected products

Open-Xchange Appsuite: 7.4.1, 7.4.2

References

http://archives.neohapsis.com/archives/bugtraq/2014-03/0108.html
http://secunia.com/advisories/57290
http://archives.neohapsis.com/archives/bugtraq/2014-03/0108.html
http://secunia.com/advisories/57290

Get alerted when CVE-2014-2077 or the next vulnerability affects your stack