CVE-2014-9466: Open-Xchange (OX) AppSuite and Server before 7.4.2-rev42, 7.6.0 before 7.6.0-rev36, and 7.6.1 before 7.6.1-...

Security readout for executives and security teams

This vulnerability lets a logged-in user of affected Open-Xchange AppSuite or Server versions read files they should not be allowed to access. The public record ties the issue to improper directory permissions and folder identifiers. It is not listed as known exploited, but it can expose sensitive business data where affected systems remain in use. Exposure is most likely in organizations still running the named legacy Open-Xchange release tracks with authenticated user access enabled. The source bundle does not identify unauthenticated exposure or affected hosted providers. Treat as a cleanup priority for any remaining legacy Open-Xchange deployments, especially where many users or external accounts authenticate. It is below emergency priority without exploitation evidence, but file-read exposure can create confidentiality risk. Mitigation focus: Upgrade OX AppSuite or Server to the fixed revision for the deployed release track.; Check Open-Xchange advisory guidance before applying compensating controls.; Restrict account access to affected systems until fixed..

Prepared

Jun 13, 2026, 22:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.