CVE-2013-5935: The Hazelcast cluster API in Open-Xchange AppSuite 7.0.x before 7.0.2-rev15 and 7.2.x before 7.2.2-rev16 do...

Security readout for executives and security teams

This CVE affects old Open-Xchange AppSuite releases where the Hazelcast cluster API could accept traffic on unintended network interfaces. If that API was reachable beyond trusted cluster networks, a remote attacker had an easier path to gain access. The sources identify fixed AppSuite revisions but do not provide a CVSS score. Exposure is most plausible in legacy AppSuite 7.0.x or 7.2.x deployments where Hazelcast cluster API traffic is reachable from networks outside intended cluster members. Current supported deployments are not confirmed affected by the supplied bundle. Prioritize investigation if the organization still runs legacy Open-Xchange AppSuite 7.0.x or 7.2.x. The business concern is unauthorized access through an internal clustering interface exposed too broadly, but urgency depends on whether those old versions remain deployed and reachable. Mitigation focus: Upgrade AppSuite 7.0.x to 7.0.2-rev15 or later fixed revision.; Upgrade AppSuite 7.2.x to 7.2.2-rev16 or later fixed revision.; Review the Open-Xchange advisory for vendor-specific deployment guidance..

Prepared

Jun 14, 2026, 15:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.