Vulnerability Details : CVE-2016-4048
An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev11. Custom messages can be shown at the login screen to notify external users about issues with sharing links. This mechanism can be abused to inject arbitrary text messages. Users may get tricked to follow instructions injected by third parties as part of social engineering attacks.
Products affected by CVE-2016-4048
- cpe:2.3:a:open-xchange:open-xchange_appsuite:*:rev9:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2016-4048
0.08%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 31 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2016-4048
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
4.3
|
MEDIUM | AV:N/AC:M/Au:N/C:P/I:N/A:N |
8.6
|
2.9
|
NIST | |
4.3
|
MEDIUM | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N |
2.8
|
1.4
|
NIST |
References for CVE-2016-4048
-
http://www.securitytracker.com/id/1036157
Open-Xchange App Suite Multiple Bugs Let Remote Users Obtain Potentially Sensitive Information, Conduct Cross-Site Scripting and Server-Side Request Forgery Attacks, Spoof Content, and Deny Service -Third Party Advisory;VDB Entry
-
http://www.securityfocus.com/archive/1/538732/100/0/threaded
SecurityFocus
Jump to