Known vulnerabilities in ownCloud Server 10.3.0

Vendor: ownCloud
Version: 10.3.0
Software CPE: cpe:2.3:a:owncloud:owncloud_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 18
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting ownCloud Server version 10.3.0 ownCloud Server 10.3.0 is affected by 18 vulnerabilities: 6 medium, 12 low Critical High Medium Low

Vulnerabilities (18)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU97428 - Improper Access Control
CVE-2024-37011
CWE-284 Low
No
No
10.15.0 17.09.2024 SB2024091728
#VU97427 - Authorization Bypass Through User-Controlled Key
CVE-2024-37010
CWE-639 Medium
No
No
10.15.0 17.09.2024 SB2024091728
#VU97426 - Server-Side Request Forgery (SSRF)
CVE-2024-37012
CWE-918 Medium
No
No
10.15.0 17.09.2024 SB2024091728
#VU97425 - Improper Handling of Extra Parameters
CVE-2024-37009
CWE-235 Low
No
No
10.15.0 17.09.2024 SB2024091728
#VU97420 - Cross-Site Request Forgery (CSRF)
CVE-2024-42014
CWE-352 Low
No
No
10.15.0 17.09.2024 SB2024091728
#VU88999 - Improper input validation
CVE-2024-26326
CWE-20 Low
No
No
10.14.0 25.04.2024 SB2024042537
#VU88998 - Improper input validation
CVE-2024-26325
CWE-20 Low
No
No
10.14.0 25.04.2024 SB2024042537
#VU88995 - Improper input validation
CVE-2024-26320
CWE-20 Low
No
No
10.13.3 25.04.2024 SB2024042534
#VU73752 - Expected Behavior Violation
CWE-440 Medium
No
No
10.12.0 16.03.2023 SB2023031623
#VU70638 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2022-43679
CWE-451 Medium
No
No
10.11.0 03.01.2023 SB2023010314
#VU64202 - Exposure of sensitive information to an unauthorized actor
CVE-2022-31649
CWE-200 Medium
No
No
10.10.0 13.06.2022 SB2022061313
#VU55564 - Exposure of sensitive information to an unauthorized actor
CVE-2021-35947
CWE-200 Low
No
No
10.8.0 04.08.2021 SB2021080401
#VU55563 - Session Fixation
CVE-2021-35948
CWE-384 Low
No
No
10.8.0 04.08.2021 SB2021080401
#VU55562 - Improper Protection of Alternate Path
CVE-2021-35949
CWE-424 Low
No
No
10.8.0 04.08.2021 SB2021080401
#VU55561 - Permissions, Privileges, and Access Controls
CVE-2021-35946
CWE-264 Medium
No
No
10.8.0 04.08.2021 SB2021080401
#VU25684 - Incorrect Use of Privileged APIs
CWE-648 Low
No
No
10.3.1 28.02.2020 SB2020022809
#VU25683 - Server-Side Request Forgery (SSRF)
CWE-918 Low
No
No
10.3.2 28.02.2020 SB2020022810
#VU25682 - Improper Access Control
CWE-284 Low
No
No
10.4.0 28.02.2020 SB2020022811