VulnerabilityDeferred

CVE-2025-30188

Malicious or unintentional API requests can be used to add significant amount of data to caches.

HIGH 7.5EPSS 0.35%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.35%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Malicious or unintentional API requests can be used to add significant amount of data to caches. Caches may evict information that is required to operate the web frontend, which leads to unavailability of the component. Please deploy the provided updates and patch releases. No publicly available exploits are known

CVSS 3.1: 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS: 0.35% probability · 28th percentile
CISA KEV: Not listed
Weakness: CWE-400
Source: security@open-xchange.com

References

https://documentation.open-xchange.com/appsuite/security/advisories/csaf/2025/oxas-adv-2025-0002.json

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.