Known vulnerabilities in Nextcloud Enterprise Server - page 3
Vendor:
Nextcloud
Software:
Nextcloud Enterprise Server
Software CPE:
cpe:2.3:a:nextcloud:nextcloud_enterprise_server:*:*:*:*:*:*:*:*
Website:
https://nextcloud.com/
Total vulnerabilities:
55
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.2
Breakdown by Severity Chart
34.0.2
33.0.7
32.0.13
34.0.1
33.0.6
32.0.12
34.0.0
33.0.5
32.0.11
33.0.4
32.0.10
33.0.3
32.0.9
33.0.2
32.0.8
33.0.1
32.0.7
33.0.0
32.0.6
31.0.14
32.0.5
32.0.4
31.0.13
32.0.3
31.0.12
29.0.16.8
28.0.14.11
27.1.11.20
26.0.13.20
25.0.13.23
24.0.12.28
23.0.12.29
22.2.10.33
32.0.2
31.0.11
32.0.1
31.0.10
30.0.17
32.0.0
30.0.16
31.0.9
30.0.15
31.0.8
30.0.14
31.0.7
30.0.13
31.0.6
30.0.12
31.0.5
30.0.11
31.0.4
30.0.10
29.0.16
31.0.3
30.0.9
29.0.15
31.0.2
30.0.8
29.0.14
31.0.1
30.0.7
29.0.13
31.0.0
30.0.6
29.0.12
25.0.13.13
26.0.13.3
25.0.13.9
24.0.12.14
23.0.12.18
22.2.10.23
21.0.9.18
27.1.11.8
26.0.13.4
25.0.13.10
24.0.12.15
27.1.11.10
26.0.13.10
25.0.13.14
27.1.11.9
26.0.13.9
30.0.5
29.0.11
30.0.4
28.0.14
30.0.3
29.0.10
28.0.13
30.0.2
29.0.9
28.0.12
30.0.1
29.0.8
28.0.11
30.0.0
29.0.7
28.0.10
29.0.6
29.0.5
28.0.9
29.0.4
28.0.8
29.0.3
28.0.7
27.1.11
29.0.2
27.1.10
29.0.1
28.0.6
28.0.5
27.1.9
29.0.0
28.0.4
27.1.8
26.0.13
28.0.3
27.1.7
26.0.12
28.0.2
27.1.6
26.0.11
28.0.1
24.0.12.9
23.0.12.13
25.0.13.4
25.0.13.3
25.0.13.2
25.0.13.1
27.1.5
26.0.10
28.0.0
27.1.4
26.0.9
24.0.12.8
23.0.12.12
22.2.10.15
21.0.9.13
20.0.14.16
27.1.3
26.0.8
25.0.13
24.0.12.5
23.0.12.9
22.2.10.14
24.0.12.7
23.0.12.11
22.2.10.16
27.1.2
27.1.1
26.0.7
25.0.12
27.1.0
26.0.6
25.0.11
26.0.5
25.0.10
27.0.2
27.0.1
26.0.4
25.0.9
20.0.14.14
19.0.13.9
24.0.12.2
23.0.12.7
22.2.10.12
21.0.9.12
26.0.3
25.0.8
27.0.0
26.0.2
25.0.7
24.0.12
26.0.1
25.0.6
23.0.12.6
22.2.10.11
21.0.9.11
23.0.13
26.0.0
25.0.5
24.0.11
22.1.1
22.1.0
22.0.0
21.0.9
21.0.8
21.0.7
21.0.6
21.0.5
21.0.4
21.0.3
21.0.2
21.0.1
21.0.0
20.0.14
20.0.13
20.0.12
20.0.11
20.0.10
20.0.9
20.0.8
20.0.7
20.0.6
20.0.5
20.0.4
20.0.3
20.0.2
20.0.1
20.0.0
19.0.13
19.0.12
19.0.11
19.0.10
19.0.9
19.0.8
19.0.7
19.0.6
19.0.5
19.0.4
19.0.3
19.0.2
19.0.1
19.0.0
18.0.14
18.0.13
18.0.12
18.0.11
18.0.10
18.0.9
18.0.8
18.0.7
18.0.6
18.0.5
18.0.4
18.0.2
18.0.1
18.0.0
17.0.10
17.0.9
17.0.8
17.0.7
17.0.6
17.0.4
17.0.3
17.0.2
17.0.1
17.0.0
16.0.11
16.0.10
16.0.9
16.0.8
16.0.7
16.0.6
16.0.5
16.0.4
16.0.3
16.0.2
16.0.1
16.0.0
15.0.14
15.0.13
15.0.12
15.0.11
15.0.10
15.0.9
15.0.8
15.0.7
15.0.6
15.0.5
15.0.4
15.0.3
15.0.2
15.0.1
15.0.0
14.0.14
14.0.13
14.0.12
14.0.11
14.0.10
14.0.9
14.0.8
14.0.7
14.0.6
14.0.5
14.0.4
14.0.3
14.0.2
14.0.1
14.0.0
13.0.12
13.0.11
13.0.10
13.0.9
13.0.8
13.0.7
13.0.6
13.0.5
13.0.4
13.0.3
13.0.2
13.0.1
13.0.0
12.0.13
12.0.12
12.0.11
12.0.10
12.0.9
12.0.8
12.0.7
12.0.6
12.0.5
12.0.4
12.0.3
12.0.2
12.0.1
12.0.0
11.0.8
11.0.7
11.0.6
11.0.5
11.0.4
11.0.3
11.0.2
11.0.1
11.0.0
10.0.6
10.0.5
10.0.4
10.0.3
10.0.2
10.0.1
10.0.0
9.1.3
9.1.2
9.1.1
9.1.0
9.0.58
9.0.57
9.0.56
9.0.55
9.0.54
9.0.53
9.0.52
9.0.51
9.0.50
9.0.7
9.0.6
9.0.5
9.0.4
9.0.3
9.0.2
9.0.1
9.0.0
8.2.9
8.2.8
8.2.7
8.2.6
8.2.5
8.2.4
8.2.3
8.2.2
8.2.1
8.2.0
8.1.11
8.1.10
8.1.9
8.1.8
8.1.7
8.1.6
8.1.5
8.1.4
8.1.3
8.1.2
8.1.1
8.1.0
8.0.16
8.0.15
8.0.14
8.0.13
8.0.12
8.0.11
8.0.10
8.0.9
8.0.8
8.0.7
8.0.6
8.0.5
8.0.4
8.0.3
8.0.2
8.0.1
8.0.0
7.0.15
7.0.14
7.0.13
7.0.12
7.0.11
7.0.10
7.0.9
7.0.8
7.0.7
7.0.6
7.0.5
7.0.4
7.0.3
7.0.2
7.0.1
7.0.0
6.0.9
6.0.8
6.0.7
6.0.6
6.0.5
6.0.4
6.0.3
6.0.2
6.0.1
6.0.0
5.0.19
5.0.17
5.0.16
5.0.15
5.0.14
5.0.13
5.0.12
5.0.11
5.0.10
5.0.9
5.0.8
5.0.7
5.0.6
5.0.5
5.0.4
5.0.3
5.0.2
5.0.1
5.0.0
4.5.13
4.5.12
4.5.11
4.5.10
4.5.9
4.5.8
4.5.7
4.5.6
4.5.5
4.5.4
4.5.3
4.5.2
4.5.1
4.5.0
4.0.16
4.0.15
4.0.14
4.0.13
4.0.12
4.0.11
4.0.10
4.0.9
4.0.8
4.0.7
4.0.6
4.0.5
4.0.4
4.0.3
4.0.2
4.0.1
4.0.0
3.0.1
3.0
1.1
23.0.14
25.0.4
24.0.10
24.0.9
23.0.12.5
23.0.12.4
23.0.12.3
23.0.12.2
23.0.12.1
25.0.3
25.0.2
22.2.10.10
22.2.10.9
22.2.10.8
22.2.10.7
22.2.10.6
22.2.10.5
21.0.9.10
21.0.9.9
21.0.9.8
21.0.9.7
21.0.9.6
21.0.9.4
21.0.9.3
21.0.9.2
21.0.9.1
21.0.9.0
20.0.14.12
20.0.14.11
20.0.14.10
20.0.14.9
20.0.14.8
20.0.14.7
20.0.14.5
20.0.14.4
20.0.14.3
20.0.14.2
20.0.14.1
20.0.14.0
23.0.12
24.0.8
23.0.11
23.0.10
23.0.9
25.0.1
25.0.0
24.0.7
24.0.6
24.0.5
24.0.4
23.0.8
22.2.10.4
22.2.10.3
22.2.10.2
22.2.10.1
22.2.10.0
24.0.3
24.0.2
24.0.1
24.0.0
23.0.7
23.0.6
23.0.4
23.0.3
23.0.2
23.0.1
23.0.0
22.2.11
22.2.10
22.2.9
22.2.7
22.2.6
22.2.5
22.2.4
22.2.3
22.2.2
22.2.1
22.2.0
23.0.5
22.2.8
21.0.9.5
20.0.14.6
19.0.13.7
Vulnerabilities (55)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU132318 - Cleartext Storage of Sensitive Information CVE-2022-39364 |
CWE-312 | Low | 22.2.10.5, 23.0.9, 24.0.5 | 26.05.2026 |
SB2022102756 |
||
| #VU74117 - Improper Restriction of Excessive Authentication Attempts CVE-2023-25818 |
CWE-307 | Medium | 21.0.9.10, 22.2.10.10, 23.0.12.5, 24.0.10, 25.0.4 | 28.03.2023 |
SB2023032204 |
||
| #VU73916 - Improper Restriction of Excessive Authentication Attempts CVE-2023-25820 |
CWE-307 | Low | 21.0.9.10, 22.2.10.10, 23.0.12.5, 24.0.10, 25.0.4 | 22.03.2023 |
SB2023032204 |
||
| #VU72577 - Improper Access Control CVE-2023-25821 |
CWE-284 | Medium | 24.0.7, 25.0.1 | 27.02.2023 |
SB2023022705 |
||
| #VU72576 - Resource exhaustion CVE-2023-25816 |
CWE-400 | Low | 25.0.3 | 27.02.2023 |
SB2023022706 |
||
| #VU72495 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2023-25579 |
CWE-22 | Medium | 20.0.14.12, 21.0.9.10, 22.2.10.10, 23.0.12, 24.0.8, 25.0.2 | 22.02.2023 |
SB2023022223 |
||
| #VU72493 - Improper Access Control CVE-2023-25161 |
CWE-284 | Low | 23.0.12, 24.0.8, 25.0.1 | 22.02.2023 |
SB2023022222 |
||
| #VU72490 - Server-Side Request Forgery (SSRF) CVE-2023-25162 |
CWE-918 | Medium | 23.0.12, 24.0.8 | 22.02.2023 |
SB2023022222 |
||
| #VU72489 - Improper Access Control CVE-2023-25159 |
CWE-284 | Low | 24.0.8, 25.0.1 | 22.02.2023 |
SB2023022212 SB2023022213 SB2023022214 |
||
| #VU69806 - Resource exhaustion CVE-2022-41968 |
CWE-400 | Low | 23.0.10, 24.0.5 | 01.12.2022 |
SB2022120138 |
||
| #VU69804 - Resource exhaustion CVE-2022-41969 |
CWE-400 | Low | 22.2.11, 23.0.11, 24.0.7, 25.0.0 | 01.12.2022 |
SB2022120137 |
||
| #VU69802 - Improper Access Control CVE-2022-41970 |
CWE-284 | Low | 24.0.7, 25.0.1 | 01.12.2022 |
SB2022120136 |
||
| #VU67419 - Server-Side Request Forgery (SSRF) CVE-2022-39211 |
CWE-918 | Low | 22.2.10.4, 23.0.8, 24.0.4 | 16.09.2022 |
SB2022091606 |
||
| #VU67395 - Exposure of sensitive information to an unauthorized actor CVE-2022-36074 |
CWE-200 | Low | 22.2.11, 23.0.7, 24.0.3 | 15.09.2022 |
SB2022091518 |
||
| #VU65375 - Improper Neutralization of CRLF Sequences ('CRLF Injection') CVE-2022-31014 |
CWE-93 | Low | 19.0.13.7, 20.0.14.6, 21.0.9.5, 22.2.8, 23.0.5 | 18.07.2022 |
SB2022071803 SB2022071804 |
Showing elements 41 - 60 out of 55