CVE-2020-12645: Open-Xchange Appsuite

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

OX App Suite 7.10.1 to 7.10.3 has improper input validation for rate limits with a crafted User-Agent header, spoofed vacation notices, and /apps/load memory consumption.

Affected products

• Open-Xchange Open-Xchange Appsuite: from 7.10.1, up to and including 7.10.3

Published 2020-08-31. Last modified 2026-06-17.