Known vulnerabilities in Deck

Vendor: Nextcloud
Software: Deck
Software CPE: cpe:2.3:a:nextcloud:deck:*:*:*:*:*:*:*:*
Total vulnerabilities: 12
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Deck Deck is affected by 12 known vulnerabilities: 6 medium, 6 low Critical High Medium Low

Vulnerabilities (12)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU119222 - Improper Encoding or Escaping of Output
CVE-2025-66548
CWE-116 Low
No
No
1.12.7, 1.14.4, 1.15.1 05.12.2025 SB2025120515
#VU119221 - Improper Access Control
CVE-2025-66557
CWE-284 Medium
No
No
1.14.6, 1.15.2 05.12.2025 SB2025120514
#VU85586 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-22213
CWE-79 Low
No
No
1.9.5, 1.11.2 19.01.2024 SB2024011908
#VU70796 - Exposure of sensitive information to an unauthorized actor
CVE-2023-22469
CWE-200 Medium
No
No
1.8.2 09.01.2023 SB2023010907
#VU70795 - Resource exhaustion
CVE-2023-22470
CWE-400 Low
No
No
1.6.5, 1.7.3, 1.8.2 09.01.2023 SB2023010907
#VU70793 - Authorization Bypass Through User-Controlled Key
CVE-2023-22471
CWE-639 Low
No
No
1.6.5, 1.7.3, 1.8.2 09.01.2023 SB2023010907
#VU63486 - Exposure of sensitive information to an unauthorized actor
CVE-2022-24906
CWE-200 Low
No
No
1.2.11, 1.4.6, 1.5.4 20.05.2022 SB2022052014
#VU63482 - Authorization Bypass Through User-Controlled Key
CVE-2022-29159
CWE-639 Medium
No
No
1.4.8, 1.5.6, 1.6.1 20.05.2022 SB2022052011
#VU57648 - Authorization Bypass Through User-Controlled Key
CVE-2021-39225
CWE-639 Medium
No
No
1.2.9, 1.4.5, 1.5.3 26.10.2021 SB2021102613
#VU56355 -
CVE-2021-37631
Medium
No
No
1.2.9, 1.4.4, 1.5.1 07.09.2021 SB2021090702
#VU53820 - Exposure of sensitive information to an unauthorized actor
CVE-2021-22913
CWE-200 Medium
No
No
1.2.7, 1.4.2 04.06.2021 SB2021060411
#VU51051 -
CVE-2020-8297
Low
No
No
1.0.2 02.03.2021 SB2021030212