CVE-2014-5236: Open-Xchange Appsuite

High severity, CVSS 7.5. EPSS: 3.8% chance of exploitation in the next 30 days.

Multiple absolute path traversal vulnerabilities in documentconverter in Open-Xchange (OX) AppSuite before 7.4.2-rev10 and 7.6.x before 7.6.0-rev10 allow remote attackers to read application files via a full pathname in a crafted (1) OLE Object or (2) image in an OpenDocument text file.

Affected products

• Open-Xchange Open-Xchange Appsuite: up to and including 7.4.1; version 7.4.2 only; version 7.6.0 only

Published 2020-01-31. Last modified 2026-06-17.