CVE-2013-5690: Multiple cross-site scripting (XSS) vulnerabilities in Open-Xchange AppSuite before 7.2.2 allow remote auth...

Security readout for executives and security teams

CVE-2013-5690 describes authenticated cross-site scripting in Open-Xchange AppSuite before 7.2.2. A logged-in attacker could inject script or HTML through specific content handling or an appointment status comment, potentially affecting other users who view the malicious content. Exposure is most likely for organizations still running Open-Xchange AppSuite versions before 7.2.2. The source bundle does not identify affected CPEs, hosted-service exposure, or downstream packaged products, so asset confirmation is required. Prioritize remediation if AppSuite is used for business email, calendaring, or collaboration. The issue needs authentication, which lowers immediate internet-wide risk, but XSS in collaboration tools can still support account abuse and data exposure. Mitigation focus: Upgrade Open-Xchange AppSuite to 7.2.2 or later where applicable.; Check the Open-Xchange advisory for deployment-specific fixes or configuration guidance.; Limit access to AppSuite to trusted users while remediation is pending..

Prepared

Jun 14, 2026, 15:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.