What is CVE-2025-30188?

CVE-2025-30188 is a high-severity vulnerability in Open-Xchange Gmbh Ox App Suite, classified under Uncontrolled Resource Consumption. CVSS score: 7.5/10. Published 2025-10-31.

How severe is CVE-2025-30188?

High severity. CVSS v3 base score is 7.5 out of 10.

Resource exhaustion in Open-Xchange Gmbh Ox App Suite

CVE-2025-30188

Malicious or unintentional API requests can be used to add significant amount of data to caches. Caches may evict information that is required to operate the web frontend, which leads to unavailability of the component. Please deploy the provided updates and patch releases. No publicly available exploits are known

Vulnerability class: DoS (Denial of Service)

EPSS: 0.003 (27.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Open-xchange Gmbh Ox App Suite — versions 0

Weakness classification (CWE)

CWE-400 — Uncontrolled Resource Consumption

References

security@open-xchange.com (vendor-advisory)

Frequently asked questions

What is CVE-2025-30188?: CVE-2025-30188 is a high-severity vulnerability in Open-Xchange Gmbh Ox App Suite, classified under Uncontrolled Resource Consumption. CVSS score: 7.5/10. Published 2025-10-31.
How severe is CVE-2025-30188?: High severity. CVSS v3 base score is 7.5 out of 10.