Open-Xchange App Suite Vulnerability Scope

Open-Xchange App Suite is a web-based communication, collaboration and office productivity software suite, which enables full integration of email, documents, scheduling and social media.

OX App Suite delivers a wide range of easy-to-use cloud‐based services for small business users, including secure email, personal and team organization, cloud storage and online office features.

We are currently looking for the following items in OX App Suite:

  • Code/command execution
  • Authentication bypass
  • Command injection


Think you figured out how to run unauthenticated commands on OX App Suite? We are looking for you! Found something not on this list? We still want to buy it!

No Bug Bounty Leaderboards, only safe disclosures