API Misconfiguration Vulnerability in Open Xchange Products
CVE-2025-30188

7.5HIGH

Key Information:

Vendor
CVE Published:
31 October 2025

What is CVE-2025-30188?

This vulnerability allows malicious or inadvertent API requests to flood caches with excessive amounts of data. As a consequence, essential information required for the web frontend operation may be evicted, leading to potential disruptions in service availability. Users are advised to implement recommended updates and patch releases to mitigate this issue, although there are currently no known public exploits.

Affected Version(s)

OX App Suite 0 <= 2.1.7

References

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-30188 : API Misconfiguration Vulnerability in Open Xchange Products