Known vulnerabilities in Nextcloud Enterprise Server
Vendor:
Nextcloud
Software:
Nextcloud Enterprise Server
Software CPE:
cpe:2.3:a:nextcloud:nextcloud_enterprise_server:*:*:*:*:*:*:*:*
Website:
https://nextcloud.com/
Total vulnerabilities:
55
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.2
Breakdown by Severity Chart
34.0.2
33.0.7
32.0.13
34.0.1
33.0.6
32.0.12
34.0.0
33.0.5
32.0.11
33.0.4
32.0.10
33.0.3
32.0.9
33.0.2
32.0.8
33.0.1
32.0.7
33.0.0
32.0.6
31.0.14
32.0.5
32.0.4
31.0.13
32.0.3
31.0.12
29.0.16.8
28.0.14.11
27.1.11.20
26.0.13.20
25.0.13.23
24.0.12.28
23.0.12.29
22.2.10.33
32.0.2
31.0.11
32.0.1
31.0.10
30.0.17
32.0.0
30.0.16
31.0.9
30.0.15
31.0.8
30.0.14
31.0.7
30.0.13
31.0.6
30.0.12
31.0.5
30.0.11
31.0.4
30.0.10
29.0.16
31.0.3
30.0.9
29.0.15
31.0.2
30.0.8
29.0.14
31.0.1
30.0.7
29.0.13
31.0.0
30.0.6
29.0.12
25.0.13.13
26.0.13.3
25.0.13.9
24.0.12.14
23.0.12.18
22.2.10.23
21.0.9.18
27.1.11.8
26.0.13.4
25.0.13.10
24.0.12.15
27.1.11.10
26.0.13.10
25.0.13.14
27.1.11.9
26.0.13.9
30.0.5
29.0.11
30.0.4
28.0.14
30.0.3
29.0.10
28.0.13
30.0.2
29.0.9
28.0.12
30.0.1
29.0.8
28.0.11
30.0.0
29.0.7
28.0.10
29.0.6
29.0.5
28.0.9
29.0.4
28.0.8
29.0.3
28.0.7
27.1.11
29.0.2
27.1.10
29.0.1
28.0.6
28.0.5
27.1.9
29.0.0
28.0.4
27.1.8
26.0.13
28.0.3
27.1.7
26.0.12
28.0.2
27.1.6
26.0.11
28.0.1
24.0.12.9
23.0.12.13
25.0.13.4
25.0.13.3
25.0.13.2
25.0.13.1
27.1.5
26.0.10
28.0.0
27.1.4
26.0.9
24.0.12.8
23.0.12.12
22.2.10.15
21.0.9.13
20.0.14.16
27.1.3
26.0.8
25.0.13
24.0.12.5
23.0.12.9
22.2.10.14
24.0.12.7
23.0.12.11
22.2.10.16
27.1.2
27.1.1
26.0.7
25.0.12
27.1.0
26.0.6
25.0.11
26.0.5
25.0.10
27.0.2
27.0.1
26.0.4
25.0.9
20.0.14.14
19.0.13.9
24.0.12.2
23.0.12.7
22.2.10.12
21.0.9.12
26.0.3
25.0.8
27.0.0
26.0.2
25.0.7
24.0.12
26.0.1
25.0.6
23.0.12.6
22.2.10.11
21.0.9.11
23.0.13
26.0.0
25.0.5
24.0.11
22.1.1
22.1.0
22.0.0
21.0.9
21.0.8
21.0.7
21.0.6
21.0.5
21.0.4
21.0.3
21.0.2
21.0.1
21.0.0
20.0.14
20.0.13
20.0.12
20.0.11
20.0.10
20.0.9
20.0.8
20.0.7
20.0.6
20.0.5
20.0.4
20.0.3
20.0.2
20.0.1
20.0.0
19.0.13
19.0.12
19.0.11
19.0.10
19.0.9
19.0.8
19.0.7
19.0.6
19.0.5
19.0.4
19.0.3
19.0.2
19.0.1
19.0.0
18.0.14
18.0.13
18.0.12
18.0.11
18.0.10
18.0.9
18.0.8
18.0.7
18.0.6
18.0.5
18.0.4
18.0.2
18.0.1
18.0.0
17.0.10
17.0.9
17.0.8
17.0.7
17.0.6
17.0.4
17.0.3
17.0.2
17.0.1
17.0.0
16.0.11
16.0.10
16.0.9
16.0.8
16.0.7
16.0.6
16.0.5
16.0.4
16.0.3
16.0.2
16.0.1
16.0.0
15.0.14
15.0.13
15.0.12
15.0.11
15.0.10
15.0.9
15.0.8
15.0.7
15.0.6
15.0.5
15.0.4
15.0.3
15.0.2
15.0.1
15.0.0
14.0.14
14.0.13
14.0.12
14.0.11
14.0.10
14.0.9
14.0.8
14.0.7
14.0.6
14.0.5
14.0.4
14.0.3
14.0.2
14.0.1
14.0.0
13.0.12
13.0.11
13.0.10
13.0.9
13.0.8
13.0.7
13.0.6
13.0.5
13.0.4
13.0.3
13.0.2
13.0.1
13.0.0
12.0.13
12.0.12
12.0.11
12.0.10
12.0.9
12.0.8
12.0.7
12.0.6
12.0.5
12.0.4
12.0.3
12.0.2
12.0.1
12.0.0
11.0.8
11.0.7
11.0.6
11.0.5
11.0.4
11.0.3
11.0.2
11.0.1
11.0.0
10.0.6
10.0.5
10.0.4
10.0.3
10.0.2
10.0.1
10.0.0
9.1.3
9.1.2
9.1.1
9.1.0
9.0.58
9.0.57
9.0.56
9.0.55
9.0.54
9.0.53
9.0.52
9.0.51
9.0.50
9.0.7
9.0.6
9.0.5
9.0.4
9.0.3
9.0.2
9.0.1
9.0.0
8.2.9
8.2.8
8.2.7
8.2.6
8.2.5
8.2.4
8.2.3
8.2.2
8.2.1
8.2.0
8.1.11
8.1.10
8.1.9
8.1.8
8.1.7
8.1.6
8.1.5
8.1.4
8.1.3
8.1.2
8.1.1
8.1.0
8.0.16
8.0.15
8.0.14
8.0.13
8.0.12
8.0.11
8.0.10
8.0.9
8.0.8
8.0.7
8.0.6
8.0.5
8.0.4
8.0.3
8.0.2
8.0.1
8.0.0
7.0.15
7.0.14
7.0.13
7.0.12
7.0.11
7.0.10
7.0.9
7.0.8
7.0.7
7.0.6
7.0.5
7.0.4
7.0.3
7.0.2
7.0.1
7.0.0
6.0.9
6.0.8
6.0.7
6.0.6
6.0.5
6.0.4
6.0.3
6.0.2
6.0.1
6.0.0
5.0.19
5.0.17
5.0.16
5.0.15
5.0.14
5.0.13
5.0.12
5.0.11
5.0.10
5.0.9
5.0.8
5.0.7
5.0.6
5.0.5
5.0.4
5.0.3
5.0.2
5.0.1
5.0.0
4.5.13
4.5.12
4.5.11
4.5.10
4.5.9
4.5.8
4.5.7
4.5.6
4.5.5
4.5.4
4.5.3
4.5.2
4.5.1
4.5.0
4.0.16
4.0.15
4.0.14
4.0.13
4.0.12
4.0.11
4.0.10
4.0.9
4.0.8
4.0.7
4.0.6
4.0.5
4.0.4
4.0.3
4.0.2
4.0.1
4.0.0
3.0.1
3.0
1.1
23.0.14
25.0.4
24.0.10
24.0.9
23.0.12.5
23.0.12.4
23.0.12.3
23.0.12.2
23.0.12.1
25.0.3
25.0.2
22.2.10.10
22.2.10.9
22.2.10.8
22.2.10.7
22.2.10.6
22.2.10.5
21.0.9.10
21.0.9.9
21.0.9.8
21.0.9.7
21.0.9.6
21.0.9.4
21.0.9.3
21.0.9.2
21.0.9.1
21.0.9.0
20.0.14.12
20.0.14.11
20.0.14.10
20.0.14.9
20.0.14.8
20.0.14.7
20.0.14.5
20.0.14.4
20.0.14.3
20.0.14.2
20.0.14.1
20.0.14.0
23.0.12
24.0.8
23.0.11
23.0.10
23.0.9
25.0.1
25.0.0
24.0.7
24.0.6
24.0.5
24.0.4
23.0.8
22.2.10.4
22.2.10.3
22.2.10.2
22.2.10.1
22.2.10.0
24.0.3
24.0.2
24.0.1
24.0.0
23.0.7
23.0.6
23.0.4
23.0.3
23.0.2
23.0.1
23.0.0
22.2.11
22.2.10
22.2.9
22.2.7
22.2.6
22.2.5
22.2.4
22.2.3
22.2.2
22.2.1
22.2.0
23.0.5
22.2.8
21.0.9.5
20.0.14.6
19.0.13.7
Vulnerabilities (55)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU141394 - Improper Access Control CVE-2026-61527 |
CWE-284 | Medium | 32.0.12, 33.0.6 | 10.08.2026 |
SB2026081040 |
||
| #VU119229 - Insufficient Logging CVE-2025-66552 |
CWE-778 | Medium | 30.0.9, 31.0.1 | 05.12.2025 |
SB2025120555 |
||
| #VU119228 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-66512 |
CWE-79 | Low | 31.0.12, 32.0.3 | 05.12.2025 |
SB2025120554 |
||
| #VU119219 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-59788 |
CWE-79 | Low | 22.2.10.33, 23.0.12.29, 24.0.12.28, 25.0.13.23, 26.0.13.20, 27.1.11.20, 28.0.14.11, 29.0.16.8, 30.0.17, 31.0.10, 32.0.1 | 05.12.2025 |
SB2025120550 |
||
| #VU103063 - Exposure of sensitive information to an unauthorized actor CVE-2024-52517 |
CWE-200 | Low | 25.0.13.13, 26.0.13.9, 27.1.11.9, 28.0.11, 29.0.8, 30.0.1 | 20.01.2025 |
SB2025012097 |
||
| #VU103062 - Cleartext Storage of Sensitive Information CVE-2024-52525 |
CWE-312 | Low | 28.0.12, 29.0.9, 30.0.2 | 20.01.2025 |
SB2025012096 |
||
| #VU103061 - Improper Authentication CVE-2024-52518 |
CWE-287 | Low | 28.0.12, 29.0.9, 30.0.2 | 20.01.2025 |
SB2025012096 |
||
| #VU103060 - Resource exhaustion CVE-2024-52520 |
CWE-400 | Medium | 27.1.11.8, 28.0.10, 29.0.7 | 20.01.2025 |
SB2025012094 |
||
| #VU103059 - Improper Access Control CVE-2024-52514 |
CWE-284 | Low | 21.0.9.18, 22.2.10.23, 23.0.12.18, 24.0.12.14, 25.0.13.9, 26.0.13.3, 27.1.9, 28.0.5, 29.0.0 | 20.01.2025 |
SB2025012095 |
||
| #VU103058 - Insecure Storage of Sensitive Information CVE-2024-52519 |
CWE-922 | Low | 27.1.11.8, 28.0.10, 29.0.7 | 20.01.2025 |
SB2025012094 |
||
| #VU103057 - Use of Incorrectly-Resolved Name or Reference CVE-2024-52515 |
CWE-706 | Medium | 24.0.12.15, 25.0.13.10, 26.0.13.4, 27.1.10, 28.0.6, 29.0.1 | 20.01.2025 |
SB2025012093 |
||
| #VU103056 - Exposure of sensitive information to an unauthorized actor CVE-2024-52523 |
CWE-200 | Low | 25.0.13.14, 26.0.13.10, 27.1.11.10, 28.0.12, 29.0.9, 30.0.2 | 20.01.2025 |
SB2025012092 |
||
| #VU103055 - Improper Privilege Management CVE-2024-52516 |
CWE-269 | Low | 26.0.13.9, 27.1.11.9, 28.0.9, 29.0.5 | 20.01.2025 |
SB2025012091 |
||
| #VU103052 - Use of Weak Hash CVE-2024-52521 |
CWE-328 | Low | 28.0.10, 29.0.7, 30.0.0 | 20.01.2025 |
SB2025012090 |
||
| #VU84547 - Improper Access Control CVE-2023-49791 |
CWE-284 | Medium | 23.0.12.13, 24.0.12.9, 25.0.13.4, 26.0.9, 27.1.4 | 19.12.2023 |
SB2023121925 |
||
| #VU84543 - Improper Restriction of Excessive Authentication Attempts CVE-2023-49792 |
CWE-307 | Medium | 23.0.12.13, 24.0.12.9, 25.0.13.4, 26.0.9, 27.1.4 | 19.12.2023 |
SB2023121925 |
||
| #VU83361 - Authorization Bypass Through User-Controlled Key CVE-2023-48304 |
CWE-639 | Low | 22.2.10.16, 23.0.12.11, 24.0.12.7, 25.0.11, 26.0.6, 27.1.0 | 21.11.2023 |
SB2023112137 |
||
| #VU83360 - Improper Access Control CVE-2023-48239 |
CWE-284 | Medium | 20.0.14.16, 21.0.9.13, 22.2.10.15, 23.0.12.12, 24.0.12.8, 25.0.13, 26.0.8, 27.1.3 | 21.11.2023 |
SB2023112136 |
||
| #VU83359 - Server-Side Request Forgery (SSRF) CVE-2023-48306 |
CWE-918 | Medium | 22.2.10.16, 23.0.12.11, 24.0.12.7, 25.0.11, 26.0.6, 27.1.0 | 21.11.2023 |
SB2023112137 |
||
| #VU83358 - Cleartext Storage of Sensitive Information CVE-2023-48305 |
CWE-312 | Low | 25.0.11, 26.0.6, 27.1.0 | 21.11.2023 |
SB2023112135 |
Showing elements 1 - 20 out of 55