CVE-2025-30188

State
Published
Severity
7.5 High
Published
Oct 31, 2025
Updated
Oct 31, 2025
Reserved
Mar 18, 2025

Read the record on cve.org

Description

Malicious or unintentional API requests can be used to add significant amount of data to caches. Caches may evict information that is required to operate the web frontend, which leads to unavailability of the component. Please deploy the provided updates and patch releases. No publicly available exploits are known

Scores

CVSSScoreVectorSource
3.17.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HOX

Weaknesses

  • CWE-400 Uncontrolled Resource Consumption

Affected Products

ProductVersions
OX App SuiteOpen-Xchange GmbH
  • 2.1.7 and earlierAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.