CVE:CVE-2013-5698
CNNVD:CNNVD-201309-019
Open-Xchange AppSuite（OX AppSuite）和Open-Xchange Server都是美国Open-Xchange公司的产品。OX AppSuite是一套Web云桌面环境。Open-Xchange Server是一个主要用于开发协同软件的半开源项目。 
OX AppSuite和Server 7.2.0-rev7及之前的版本中存在跨站脚本漏洞。远程经过授权的攻击者可通过对‘delivery=view’的操作利用该漏洞注入任意Web脚本或HTML。
solution:Upgrade open-xchange open-xchange_appsuite to a higher version than 6.22.0,6.22.1,7.0.1,7.0.2,7.2.0,and avoid the version 6.22.0,6.22.1,7.0.1,7.0.2,7.2.0; Upgrade open-xchange open-xchange_server to a higher version than 6.22.0,6.22.1,7.0.1,7.0.2,7.2.0,and avoid the version 6.22.0,6.22.1,7.0.1,7.0.2,7.2.0