Script Code Execution Vulnerability in Open-Xchange Products

CVE-2025-59025

What is CVE-2025-59025?

A vulnerability in Open-Xchange Appsuite enables the execution of script code via malicious email content. Users may unknowingly carry out unintended actions within their accounts, which could lead to the exfiltration of sensitive information. To address this issue, sanitization measures have been updated in the platform. Currently, no publicly available exploits are known, but users are advised to remain vigilant.

References