Open-Xchange

target_in_scope

asset_identifier asset_type availability requirement confidentiality requirement eligible for bounty eligible for submission integrity requirement max_severity
sandbox.open-xchange.com URL critical
1385582725 APPLE_STORE_APP_ID none medium low high
798570177 APPLE_STORE_APP_ID none medium low high
com.openxchange.drive.vanilla GOOGLE_PLAY_APP_ID none medium low high
com.openxchange.mobile.oxmail GOOGLE_PLAY_APP_ID none medium low high
https://github.com/PowerDNS/pdns SOURCE_CODE critical
https://github.com/dovecot/core SOURCE_CODE critical
https://github.com/dovecot/pigeonhole SOURCE_CODE critical
https://repo.powerdns.com/ SOURCE_CODE critical
https://github.com/open-xchange/appsuite-frontend SOURCE_CODE high high high critical
https://github.com/open-xchange/appsuite-middleware SOURCE_CODE high high high critical
https://repo.dovecot.org DOWNLOADABLE_EXECUTABLES high high high critical
https://repo.powerdns.com DOWNLOADABLE_EXECUTABLES high high high critical
com.openexchange.drive.vanilla GOOGLE_PLAY_APP_ID none medium low high

target_out_of_scope

asset_identifier asset_type availability requirement confidentiality requirement eligible for bounty eligible for submission integrity requirement max_severity
*.open-xchange.com URL critical
Our corporate website, blog and any other services are not in scope fo this program. It solely focuses on the software that we create, which is available as source-code, packages and as a hosted sandbox environment.
*.dovecot.fi URL none
*.dovecot.org URL none
*.powerdns.com URL none
*.powerdns.org URL none