Script Injection Vulnerability in Open-Xchange Appsuite Products
CVE-2025-30190
5.4MEDIUM
What is CVE-2025-30190?
This vulnerability allows an attacker to inject malicious script code through crafted office documents. When such documents are edited, unintended actions may be executed within the user’s account context. This can lead to the unauthorized exfiltration of sensitive information. It is crucial for users to apply the necessary updates and patches to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
OX App Suite 0 <= 8.35.1513817
OX App Suite 0 <= 8.39.1565928
OX App Suite 0 <= 8.40.1565934
References
CVSS V3.1
Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
