CVE-2022-29851: Open-Xchange Ox App Suite

Critical severity, CVSS 9.8. EPSS: 3.8% chance of exploitation in the next 30 days.

documentconverter in OX App Suite through 7.10.6, in a non-default configuration with ghostscript, allows OS Command Injection because file conversion may occur for an EPS document that is disguised as a PDF document.

Affected products

• Open-Xchange Ox App Suite: up to and including 7.10.6

Published 2022-10-25. Last modified 2026-06-17.