Known vulnerabilities in Nextcloud Server
Vendor:
Nextcloud
Software:
Nextcloud Server
Software CPE:
cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*
Website:
https://nextcloud.com/
Total vulnerabilities:
136
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
34.0.3
33.0.8
32.0.14
34.0.2
33.0.7
32.0.13
34.0.1
33.0.6
32.0.12
34.0.0
33.0.5
32.0.11
33.0.4
32.0.10
33.0.3
32.0.9
33.0.2
32.0.8
33.0.1
32.0.7
33.0.0
32.0.6
31.0.14
32.0.5
32.0.4
31.0.13
32.0.3
31.0.12
32.0.2
31.0.11
32.0.1
31.0.10
30.0.17
32.0.0
30.0.16
31.0.9
30.0.15
31.0.8
30.0.14
31.0.7
30.0.13
31.0.6
30.0.12
31.0.5
30.0.11
31.0.4
30.0.10
29.0.16
31.0.3
30.0.9
29.0.15
31.0.2
30.0.8
29.0.14
31.0.1
30.0.7
29.0.13
31.0.0
30.0.6
29.0.12
30.0.5
29.0.11
30.0.4
28.0.14
30.0.3
29.0.10
28.0.13
30.0.2
29.0.9
28.0.12
30.0.1
29.0.8
28.0.11
30.0.0
29.0.7
28.0.10
29.0.6
29.0.5
28.0.9
29.0.4
28.0.8
27.1.11
29.0.3
28.0.7
29.0.2
27.1.10
29.0.1
28.0.6
28.0.5
27.1.9
29.0.0
28.0.4
27.1.8
26.0.13
28.0.3
27.1.7
26.0.12
28.0.2
26.0.11
27.1.6
28.0.1
27.1.5
26.0.10
28.0.0
27.1.4
26.0.9
27.1.3
26.0.8
25.0.13
27.1.2
27.1.1
26.0.7
25.0.12
27.1.0
26.0.6
25.0.11
26.0.5
25.0.10
27.0.2
27.0.1
26.0.4
25.0.9
26.0.3
25.0.8
27.0.0
26.0.2
25.0.7
26.0.1
25.0.6
24.0.12
5.1.0
1.11.3
11.3.1.5
4.2
1.7.3
5.18.0
25.0.5
24.0.11
26.0.0
25.0.4
24.0.10
25.0.3
24.0.9
1.6.5
24.0.8
23.0.12
25.0.2
25.0.1
24.0.7
23.0.11
25.0.0
24.0.6
23.0.10
24.0.5
23.0.9
24.0.4
23.0.8
22.2.10
24.0.3
23.0.7
24.0.2
23.0.6
22.2.9
24.0.1
23.0.5
22.2.8
24.0.0
20.0.14.4
23.0.4
22.2.7
23.0.3
22.2.6
23.0.2
22.2.5
21.0.9
22.2.4
21.0.8
23.0.1
23.0.0
22.2.3
21.0.7
22.2.2
22.2.1
21.0.6
20.0.14
21.0.5
20.0.13
22.2.0
22.1.1
20.0.12
21.0.4
22.1.0
22.0.0
19.0.13
20.0.11
21.0.3
19.0.12
19.0.11
20.0.10
21.0.2
19.0.10
20.0.9
21.0.1
19.0.9
20.0.8
21.0.0
20.0.7
18.0.14
19.0.8
20.0.6
20.0.5
18.0.13
19.0.7
20.0.4
18.0.12
19.0.6
20.0.3
18.0.11
19.0.5
20.0.2
20.0.1
17.0.10
18.0.10
19.0.4
20.0.0
18.0.9
19.0.3
17.0.9
18.0.8
19.0.2
17.0.8
18.0.7
19.0.1
18.0.6
16.0.11
17.0.7
18.0.5
19.0.0
3.10.0
3.9.2
3.9.1
3.9.0
3.7.1
3.7.0
3.6.2
3.6.1
3.6.0
3.5.1
3.5.0
3.4.2
3.4.1
3.4.0
3.3.2
3.3.1
3.3.0
3.2.4
3.2.3
3.2.2
3.2.1
3.2.0
3.1.0
3.0.3
3.0.2
3.0.0
2.25.6
2.25.5
2.25.4
2.25.3
2.25.2
2.25.1
2.25.0
2.24.4
2.24.3
2.24.1
2.24.0
2.23.8
2.23.7
2.23.6
2.23.5
2.23.4
2.23.3
2.23.2
2.23.1
2.23.0
2.22.9
2.22.8
2.22.7
2.22.6
2.22.5
2.22.4
2.7.0
2.6.4
2.6.3
2.6.2
2.6.1
2.6.0
2.5.3
2.5.2
2.5.1
2.5.0
2.4.3
2.4.2
2.4.1
2.4.0
2.3.4
2.3.3
2.3.2
2.3.1
2.3.0
2.2.4
2.2.3
2.1.0
2.0.2
2.0.1
2.0.0
1.8.3
1.8.2
1.8.1
1.8.0
1.7.1
1.7.0
1.6.4
1.6.3
1.6.2
1.6.1
1.6.0
1.5.3
1.5.2
1.5.1
1.5.0
1.4.3
1.4.2
1.4.1
1.4.0
1.3.1
1.3.0
1.2.5
1.2.4
1.2.3
1.2.2
1.2.1
1.2.0
1.1.2
1.1.0
1.0.1
1.0.0
0.0.2
18.0.3
18.0.4
18.0.2
18.0.1
18.0.0
17.0.6
17.0.4
17.0.3
17.0.2
17.0.1
17.0.0
16.0.10
16.0.9
16.0.8
16.0.7
16.0.6
16.0.5
16.0.4
16.0.3
16.0.2
16.0.1
16.0.0
15.0.14
15.0.13
15.0.12
15.0.11
15.0.10
15.0.9
15.0.8
15.0.7
15.0.6
15.0.5
15.0.4
15.0.3
15.0.2
15.0.1
15.0.0
14.0.14
14.0.13
14.0.12
14.0.11
14.0.10
14.0.9
14.0.8
14.0.7
14.0.6
14.0.5
14.0.4
14.0.3
14.0.2
14.0.1
14.0.0
13.0.12
13.0.11
13.0.10
13.0.9
13.0.8
13.0.7
13.0.6
12.0.13
12.0.12
12.0.11
12.0.10
12.0.9
11.0.8
10.0.6
10.0.5
10.0.4
10.0.3
10.0.2
10.0.1
10.0.0
9.1.3
9.1.2
9.1.1
9.1.0
9.0.58
9.0.57
9.0.56
9.0.55
9.0.54
9.0.53
9.0.52
9.0.51
9.0.50
9.0.7
9.0.6
9.0.5
9.0.4
9.0.3
9.0.2
9.0.1
9.0.0
8.2.9
8.2.8
8.2.7
8.2.6
8.2.5
8.2.4
8.2.3
8.2.2
8.2.1
8.2.0
8.1.11
8.1.10
8.1.9
8.1.8
8.1.7
8.1.6
8.1.5
8.1.4
8.1.3
8.1.2
8.1.1
8.1.0
8.0.16
8.0.15
8.0.14
8.0.13
8.0.12
8.0.11
8.0.10
8.0.9
8.0.8
8.0.7
8.0.6
8.0.5
8.0.4
8.0.3
8.0.2
8.0.1
8.0.0
7.0.15
7.0.14
7.0.13
7.0.12
7.0.11
7.0.10
7.0.9
7.0.8
7.0.7
7.0.6
7.0.5
7.0.4
7.0.3
7.0.2
7.0.1
7.0.0
6.0.9
6.0.8
6.0.7
6.0.6
6.0.5
6.0.4
6.0.3
6.0.2
6.0.1
6.0.0
5.0.19
5.0.17
5.0.16
5.0.15
5.0.14
5.0.13
5.0.12
5.0.11
5.0.10
5.0.9
5.0.8
5.0.7
5.0.6
5.0.5
5.0.4
5.0.3
5.0.2
5.0.1
5.0.0
4.5.13
4.5.12
4.5.11
4.5.10
4.5.9
4.5.8
4.5.7
4.5.6
4.5.5
4.5.4
4.5.3
4.5.2
4.5.1
4.5.0
4.0.16
4.0.15
4.0.14
4.0.13
4.0.12
4.0.11
4.0.10
4.0.9
4.0.8
4.0.7
4.0.6
4.0.5
4.0.4
4.0.3
4.0.2
4.0.1
4.0.0
3.0.1
3.0
1.1
13.0.5
13.0.4
13.0.2
13.0.1
13.0.0
12.0.7
12.0.6
13.0.3
12.0.8
12.0.0
12.0.1
12.0.2
12.0.3
12.0.4
11.0.0
11.0.1
11.0.2
11.0.3
11.0.4
11.0.5
11.0.6
12.0.5
11.0.7
Vulnerabilities (136)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU141394 - Improper Access Control CVE-2026-61527 |
CWE-284 | Medium | 32.0.12, 33.0.6, 34.0.1 | 10.08.2026 |
SB2026081040 |
||
| #VU119229 - Insufficient Logging CVE-2025-66552 |
CWE-778 | Medium | 30.0.9, 31.0.1 | 05.12.2025 |
SB2025120555 |
||
| #VU119228 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-66512 |
CWE-79 | Low | 31.0.12, 32.0.3 | 05.12.2025 |
SB2025120554 |
||
| #VU119219 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-59788 |
CWE-79 | Low | 30.0.17, 31.0.10, 32.0.1 | 05.12.2025 |
SB2025120550 |
||
| #VU103063 - Exposure of sensitive information to an unauthorized actor CVE-2024-52517 |
CWE-200 | Low | 28.0.11, 29.0.8, 30.0.1 | 20.01.2025 |
SB2025012097 |
||
| #VU103062 - Cleartext Storage of Sensitive Information CVE-2024-52525 |
CWE-312 | Low | 28.0.12, 29.0.9, 30.0.2 | 20.01.2025 |
SB2025012096 |
||
| #VU103061 - Improper Authentication CVE-2024-52518 |
CWE-287 | Low | 28.0.12, 29.0.9, 30.0.2 | 20.01.2025 |
SB2025012096 |
||
| #VU103060 - Resource exhaustion CVE-2024-52520 |
CWE-400 | Medium | 28.0.10, 29.0.7 | 20.01.2025 |
SB2025012094 |
||
| #VU103059 - Improper Access Control CVE-2024-52514 |
CWE-284 | Low | 27.1.9, 28.0.5, 29.0.0 | 20.01.2025 |
SB2025012095 |
||
| #VU103058 - Insecure Storage of Sensitive Information CVE-2024-52519 |
CWE-922 | Low | 28.0.10, 29.0.7 | 20.01.2025 |
SB2025012094 |
||
| #VU103057 - Use of Incorrectly-Resolved Name or Reference CVE-2024-52515 |
CWE-706 | Medium | 27.1.10, 28.0.6, 29.0.1 | 20.01.2025 |
SB2025012093 |
||
| #VU103056 - Exposure of sensitive information to an unauthorized actor CVE-2024-52523 |
CWE-200 | Low | 28.0.12, 29.0.9, 30.0.2 | 20.01.2025 |
SB2025012092 |
||
| #VU103055 - Improper Privilege Management CVE-2024-52516 |
CWE-269 | Low | 28.0.9, 29.0.5 | 20.01.2025 |
SB2025012091 |
||
| #VU103052 - Use of Weak Hash CVE-2024-52521 |
CWE-328 | Low | 28.0.10, 29.0.7, 30.0.0 | 20.01.2025 |
SB2025012090 |
||
| #VU85591 - Violation of Secure Design Principles CVE-2024-22403 |
CWE-657 | Low | 28.0.0 | 19.01.2024 |
SB2024011911 |
||
| #VU84547 - Improper Access Control CVE-2023-49791 |
CWE-284 | Medium | 26.0.9, 27.1.4 | 19.12.2023 |
SB2023121925 |
||
| #VU84543 - Improper Restriction of Excessive Authentication Attempts CVE-2023-49792 |
CWE-307 | Medium | 26.0.9, 27.1.4 | 19.12.2023 |
SB2023121925 |
||
| #VU83361 - Authorization Bypass Through User-Controlled Key CVE-2023-48304 |
CWE-639 | Low | 25.0.11, 26.0.6, 27.1.0 | 21.11.2023 |
SB2023112137 |
||
| #VU83360 - Improper Access Control CVE-2023-48239 |
CWE-284 | Medium | 25.0.13, 26.0.8, 27.1.3 | 21.11.2023 |
SB2023112136 |
||
| #VU83359 - Server-Side Request Forgery (SSRF) CVE-2023-48306 |
CWE-918 | Medium | 25.0.11, 26.0.6, 27.1.0 | 21.11.2023 |
SB2023112137 |
Showing elements 1 - 20 out of 136