Known vulnerabilities in Nextcloud Mail

Vendor: Nextcloud
Software CPE: cpe:2.3:a:nextcloud:nextcloud_mail:*:*:*:*:*:*:*:*
Total vulnerabilities: 13
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Nextcloud Mail Nextcloud Mail is affected by 13 known vulnerabilities: 6 medium, 7 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU141393 - Exposure of Private Information ('Privacy Violation')
CVE-2026-61545
CWE-359 Medium
No
No
3.7.25, 5.5.16, 5.6.20, 5.7.13 10.08.2026 SB2026081039
#VU83342 - Server-Side Request Forgery (SSRF)
CVE-2023-48307
CWE-918 Low
No
No
2.2.8, 3.3.0 21.11.2023 SB2023112133
#VU82073 - Server-Side Request Forgery (SSRF)
CVE-2023-45660
CWE-918 Medium
No
No
2.2.8, 3.3.0 17.10.2023 SB2023101715
#VU76586 - Server-Side Request Forgery (SSRF)
CVE-2023-33184
CWE-918 Low
No
No
1.15.3, 2.2.5, 3.0.2 29.05.2023 SB2023052909
#VU72491 - Authorization Bypass Through User-Controlled Key
CVE-2023-25160
CWE-639 Low
No
No
1.11.8, 1.12.9, 1.14.5, 2.2.1 22.02.2023 SB2023022217
#VU71816 - Server-Side Request Forgery (SSRF)
CVE-2023-23943
CWE-918 Low
No
No
1.15.0, 2.2.2 06.02.2023 SB2023020641
#VU71815 - Unprotected Storage of Credentials
CVE-2023-23944
CWE-256 Low
No
No
2.2.2 06.02.2023 SB2023020640
#VU66129 - Server-Side Request Forgery (SSRF)
CVE-2022-31132
CWE-918 Medium
No
No
1.12.8, 1.13.6 05.08.2022 SB2022080524
#VU66127 - Cleartext Storage of Sensitive Information
CVE-2022-31119
CWE-312 Low
No
No
1.12.1 05.08.2022 SB2022080522
#VU65374 - Authorization Bypass Through User-Controlled Key
CVE-2022-31131
CWE-639 Medium
No
No
1.12.2 18.07.2022 SB2022071802
#VU57650 - Exposure of sensitive information to an unauthorized actor
CVE-2021-39220
CWE-200 Low
No
No
1.10.4 26.10.2021 SB2021102616
#VU54666 - Exposure of sensitive information to an unauthorized actor
CVE-2021-32707
CWE-200 Medium
No
No
1.9.6, 1.10.0 12.07.2021 SB2021071214
SB2021072010
#VU53817 - Permissions, Privileges, and Access Controls
CVE-2021-32652
CWE-264 Medium
No
No
1.4.3, 1.8.2 04.06.2021 SB2021060409