VULNERABILITY INTELLIGENCE
CVE-2014-9466
CVSS score4 NONE
EPSS probability2.13%
CISA KEVNot currently listed
Published2015-02-17
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:S/C:P/I:N/A:N
Description
Open-Xchange (OX) AppSuite and Server before 7.4.2-rev42, 7.6.0 before 7.6.0-rev36, and 7.6.1 before 7.6.1-rev14 does not properly handle directory permissions, which allows remote authenticated users to read files via unspecified vectors, related to the "folder identifier."
Weakness classification
- nvd@nist.gov: CWE-264