CVE-2021-38376: Open-Xchange Ox App Suite

Medium severity, CVSS 5.3. EPSS: 1.5% chance of exploitation in the next 30 days.

OX App Suite through 7.10.5 has Incorrect Access Control for retrieval of session information via the rampup action of the login API call.

Affected products

• Open-Xchange Ox App Suite: up to and including 7.10.5

Published 2021-11-22. Last modified 2026-06-17.