CVE-2025-30188
High
Description
Malicious or unintentional API requests can be used to add significant amount of data to caches. Caches may evict information that is required to operate the web frontend, which leads to unavailability of the component. Please deploy the provided updates and patch releases. No publicly available exploits are known
SeverityHigh
CVSS7.5
Exploit probability—
ProductOX App Suite
PublishedOct 31, 2025
First seenOct 31, 2025
Weakness typeCWE-400Uncontrolled resource consumption
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Open-Xchange GmbH OX App Suite | v ≤ 2.1.7 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.