agentprime: open-xchange-gmbh-ox-dovecot-proEvery new CVE for open-xchange-gmbh-ox-dovecot-pro.https://agentprime.io/CVE-2026-73209: Uncontrolled recursion in Open-Xchange GmbH OX Dovecot Pro and othershttps://agentprime.io/advisories/CVE-2026-73209/https://agentprime.io/advisories/CVE-2026-73209/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Aug 2026 10:12:33 GMTCVECVE-2026-73208: Improper authentication in Open-Xchange GmbH OX Dovecot Pro and othershttps://agentprime.io/advisories/CVE-2026-73208/https://agentprime.io/advisories/CVE-2026-73208/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Aug 2026 10:12:32 GMTCVECVE-2026-52687: Uncontrolled resource consumption in Open-Xchange GmbH OX Dovecot Pro and othershttps://agentprime.io/advisories/CVE-2026-52687/https://agentprime.io/advisories/CVE-2026-52687/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Aug 2026 10:12:31 GMTCVECVE-2026-52681: Sieve CPU resource usage is tracked in the compiled script, so an attacker that has valid credentials can reset the accounting by repeatedly changing the active script.https://agentprime.io/advisories/CVE-2026-52681/https://agentprime.io/advisories/CVE-2026-52681/CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Aug 2026 10:12:30 GMTCVECVE-2026-42395: Uncontrolled resource consumption in Open-Xchange GmbH OX Dovecot Pro and othershttps://agentprime.io/advisories/CVE-2026-42395/https://agentprime.io/advisories/CVE-2026-42395/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Aug 2026 10:12:29 GMTCVECVE-2026-42393: Information disclosure in Open-Xchange GmbH OX Dovecot Pro and othershttps://agentprime.io/advisories/CVE-2026-42393/https://agentprime.io/advisories/CVE-2026-42393/CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Aug 2026 10:12:28 GMTCVECVE-2026-42392: Information disclosure in Open-Xchange GmbH OX Dovecot Pro and othershttps://agentprime.io/advisories/CVE-2026-42392/https://agentprime.io/advisories/CVE-2026-42392/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Aug 2026 10:12:27 GMTCVECVE-2026-42391: Uncontrolled resource consumption in Open-Xchange GmbH OX Dovecot Pro and othershttps://agentprime.io/advisories/CVE-2026-42391/https://agentprime.io/advisories/CVE-2026-42391/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Aug 2026 10:12:27 GMTCVECVE-2026-42008: Improper authentication in Open-Xchange GmbH OX Dovecot Pro and othershttps://agentprime.io/advisories/CVE-2026-42008/https://agentprime.io/advisories/CVE-2026-42008/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Aug 2026 10:12:26 GMTCVECVE-2026-42007: Use after free in Open-Xchange GmbH OX Dovecot Pro and othershttps://agentprime.io/advisories/CVE-2026-42007/https://agentprime.io/advisories/CVE-2026-42007/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Aug 2026 10:12:25 GMTCVEcriticalCVE-2026-40205: Improper authentication in Open-Xchange GmbH OX Dovecot Pro and othershttps://agentprime.io/advisories/CVE-2026-40205/https://agentprime.io/advisories/CVE-2026-40205/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Aug 2026 10:12:24 GMTCVECVE-2026-40204: Improper access control in Open-Xchange GmbH OX Dovecot Pro and othershttps://agentprime.io/advisories/CVE-2026-40204/https://agentprime.io/advisories/CVE-2026-40204/CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Aug 2026 10:12:23 GMTCVECVE-2026-40203: Information disclosure in Open-Xchange GmbH OX Dovecot Pro and othershttps://agentprime.io/advisories/CVE-2026-40203/https://agentprime.io/advisories/CVE-2026-40203/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Aug 2026 10:12:22 GMTCVECVE-2026-40018: SQL injection in Open-Xchange GmbH OX Dovecot Pro and othershttps://agentprime.io/advisories/CVE-2026-40018/https://agentprime.io/advisories/CVE-2026-40018/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Aug 2026 10:12:20 GMTCVECVE-2026-40017: Uncontrolled resource consumption in Open-Xchange GmbH OX Dovecot Pro and othershttps://agentprime.io/advisories/CVE-2026-40017/https://agentprime.io/advisories/CVE-2026-40017/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Aug 2026 10:12:19 GMTCVECVE-2026-40015: Out-of-bounds read in Open-Xchange GmbH OX Dovecot Pro and othershttps://agentprime.io/advisories/CVE-2026-40015/https://agentprime.io/advisories/CVE-2026-40015/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Aug 2026 10:12:18 GMTCVECVE-2026-40014: Uncontrolled resource consumption in Open-Xchange GmbH OX Dovecot Pro and othershttps://agentprime.io/advisories/CVE-2026-40014/https://agentprime.io/advisories/CVE-2026-40014/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Aug 2026 10:12:17 GMTCVECVE-2026-40013: An attacker that has valid credentials can submit a Sieve script containing an extreme numeric literal, which causes an out-of-bounds write when the ManageSieve service compiles the script.https://agentprime.io/advisories/CVE-2026-40013/https://agentprime.io/advisories/CVE-2026-40013/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Aug 2026 10:12:16 GMTCVECVE-2026-33607: Uncontrolled resource consumption in Open-Xchange GmbH OX Dovecot Pro and othershttps://agentprime.io/advisories/CVE-2026-33607/https://agentprime.io/advisories/CVE-2026-33607/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Aug 2026 10:12:15 GMTCVECVE-2026-33606: CRLF injection in Open-Xchange GmbH OX Dovecot Pro and othershttps://agentprime.io/advisories/CVE-2026-33606/https://agentprime.io/advisories/CVE-2026-33606/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Aug 2026 10:12:14 GMTCVECVE-2026-33605: Uncontrolled resource consumption in Open-Xchange GmbH OX Dovecot Pro and othershttps://agentprime.io/advisories/CVE-2026-33605/https://agentprime.io/advisories/CVE-2026-33605/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Aug 2026 10:12:13 GMTCVECVE-2026-33604: An attacker that can get Dovecot to relay a message, for example through Sieve redirect or submission relay, can use a crafted line ending in the message body to bypass the outbound protection that p…https://agentprime.io/advisories/CVE-2026-33604/https://agentprime.io/advisories/CVE-2026-33604/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Aug 2026 10:12:12 GMTCVECVE-2026-33263: When mail_max_userip_connections is set (default 10) and reached, submission-login can crash with epoll() panic caused by file descriptor handling issues.https://agentprime.io/advisories/CVE-2026-33263/https://agentprime.io/advisories/CVE-2026-33263/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Aug 2026 10:12:12 GMTCVECVE-2026-27852: Uncontrolled resource consumption in Open-Xchange GmbH OX Dovecot Pro and othershttps://agentprime.io/advisories/CVE-2026-27852/https://agentprime.io/advisories/CVE-2026-27852/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Aug 2026 10:12:11 GMTCVECVE-2026-42006: Uncontrolled resource consumption in Open-Xchange GmbH OX Dovecot Prohttps://agentprime.io/advisories/CVE-2026-42006/https://agentprime.io/advisories/CVE-2026-42006/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 May 2026 13:28:46 GMTCVECVE-2026-40020: Improper access control in Open-Xchange GmbH OX Dovecot Prohttps://agentprime.io/advisories/CVE-2026-40020/https://agentprime.io/advisories/CVE-2026-40020/CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 May 2026 13:28:46 GMTCVECVE-2026-40016: Uncontrolled resource consumption in Open-Xchange GmbH OX Dovecot Prohttps://agentprime.io/advisories/CVE-2026-40016/https://agentprime.io/advisories/CVE-2026-40016/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 May 2026 13:28:45 GMTCVECVE-2026-33603: Attacker can use a specially crafted base64 exchange between Dovecot and Client to fake SCRAM TLS channel binding.https://agentprime.io/advisories/CVE-2026-33603/https://agentprime.io/advisories/CVE-2026-33603/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 May 2026 13:28:44 GMTCVECVE-2026-27851: SQL injection in Open-Xchange GmbH OX Dovecot Prohttps://agentprime.io/advisories/CVE-2026-27851/https://agentprime.io/advisories/CVE-2026-27851/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 May 2026 13:28:43 GMTCVECVE-2026-27860: LDAP injection in Open-Xchange GmbH OX Dovecot Prohttps://agentprime.io/advisories/CVE-2026-27860/https://agentprime.io/advisories/CVE-2026-27860/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 27 Mar 2026 08:10:22 GMTCVECVE-2026-27859: Uncontrolled resource consumption in Open-Xchange GmbH OX Dovecot Prohttps://agentprime.io/advisories/CVE-2026-27859/https://agentprime.io/advisories/CVE-2026-27859/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 27 Mar 2026 08:10:22 GMTCVECVE-2026-27858: Uncontrolled resource consumption in Open-Xchange GmbH OX Dovecot Prohttps://agentprime.io/advisories/CVE-2026-27858/https://agentprime.io/advisories/CVE-2026-27858/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 27 Mar 2026 08:10:21 GMTCVECVE-2026-27857: Uncontrolled resource consumption in Open-Xchange GmbH OX Dovecot Prohttps://agentprime.io/advisories/CVE-2026-27857/https://agentprime.io/advisories/CVE-2026-27857/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 27 Mar 2026 08:10:20 GMTCVECVE-2026-27856: Improper authentication in Open-Xchange GmbH OX Dovecot Prohttps://agentprime.io/advisories/CVE-2026-27856/https://agentprime.io/advisories/CVE-2026-27856/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 27 Mar 2026 08:10:19 GMTCVECVE-2026-27855: Authentication bypass by replay in Open-Xchange GmbH OX Dovecot Prohttps://agentprime.io/advisories/CVE-2026-27855/https://agentprime.io/advisories/CVE-2026-27855/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 27 Mar 2026 08:10:18 GMTCVECVE-2026-24031: SQL injection in Open-Xchange GmbH OX Dovecot Prohttps://agentprime.io/advisories/CVE-2026-24031/https://agentprime.io/advisories/CVE-2026-24031/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 27 Mar 2026 08:10:18 GMTCVECVE-2026-0394: Path traversal in Open-Xchange GmbH OX Dovecot Prohttps://agentprime.io/advisories/CVE-2026-0394/https://agentprime.io/advisories/CVE-2026-0394/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 27 Mar 2026 08:10:17 GMTCVECVE-2025-59032: Improper input validation in Open-Xchange GmbH OX Dovecot Prohttps://agentprime.io/advisories/CVE-2025-59032/https://agentprime.io/advisories/CVE-2025-59032/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 27 Mar 2026 08:10:16 GMTCVECVE-2025-59031: Information disclosure in Open-Xchange GmbH OX Dovecot Prohttps://agentprime.io/advisories/CVE-2025-59031/https://agentprime.io/advisories/CVE-2025-59031/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 27 Mar 2026 08:10:15 GMTCVECVE-2025-59028: Improper input validation in Open-Xchange GmbH OX Dovecot Prohttps://agentprime.io/advisories/CVE-2025-59028/https://agentprime.io/advisories/CVE-2025-59028/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 27 Mar 2026 08:10:15 GMTCVECVE-2025-30189: When cache is enabled, some passdb/userdb drivers incorrectly cache all users with same cache key, causing wrong cached information to be used for these users.https://agentprime.io/advisories/CVE-2025-30189/https://agentprime.io/advisories/CVE-2025-30189/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 31 Oct 2025 09:02:33 GMTCVECVE-2024-23185: Resource allocation without limits in Open-Xchange GmbH OX Dovecot Prohttps://agentprime.io/advisories/CVE-2024-23185/https://agentprime.io/advisories/CVE-2024-23185/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 Sep 2024 14:38:50 GMTCVECVE-2024-23184: Resource allocation without limits in Open-Xchange GmbH OX Dovecot Prohttps://agentprime.io/advisories/CVE-2024-23184/https://agentprime.io/advisories/CVE-2024-23184/CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 Sep 2024 14:33:34 GMTCVECVE-2024-25584: Insufficient verification of data authenticity in Open-Xchange GmbH OX Dovecot Prohttps://agentprime.io/advisories/CVE-2024-25584/https://agentprime.io/advisories/CVE-2024-25584/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Sep 2024 15:02:48 GMTCVE