Known vulnerabilities in Nextcloud Server - page 5

Vendor: Nextcloud
Software CPE: cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 136
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Nextcloud Server Nextcloud Server is affected by 136 known vulnerabilities: 12 high, 51 medium, 73 low Critical High Medium Low

Vulnerabilities (136)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU54670 - Exposure of sensitive information to an unauthorized actor
CVE-2021-32734
CWE-200 Medium
No
No
19.0.13, 20.0.11, 21.0.3 12.07.2021 SB2021071213
#VU54669 - Incorrect Ownership Assignment
CVE-2021-32726
CWE-708 Medium
No
No
19.0.13, 20.0.11, 21.0.3 12.07.2021 SB2021071213
#VU54668 - Improper Control of Interaction Frequency
CVE-2021-32741
CWE-799 Medium
No
No
19.0.13, 20.0.11, 21.0.3 12.07.2021 SB2021071213
#VU54667 - Improper Control of Interaction Frequency
CVE-2021-32705
CWE-799 Medium
No
No
19.0.13, 20.0.11, 21.0.3 12.07.2021 SB2021071213
#VU53830 - Improper Access Control
CVE-2021-32656
CWE-284 Medium
No
No
19.0.11, 20.0.10, 21.0.2 07.06.2021 SB2021060414
#VU53829 - Improper Handling of Unexpected Data Type
CVE-2021-32655
CWE-241 Medium
No
No
19.0.11, 20.0.10, 21.0.2 07.06.2021 SB2021060414
#VU53828 - Improper Access Control
CVE-2021-32657
CWE-284 Low
No
No
19.0.11, 20.0.10, 21.0.2 07.06.2021 SB2021060414
#VU53827 - Exposure of sensitive information to an unauthorized actor
CVE-2021-32653
CWE-200 Medium
No
No
19.0.11, 20.0.10, 21.0.2 07.06.2021 SB2021060414
#VU53819 -
CVE-2021-32654
High
No
No
19.0.11, 20.0.10, 21.0.2 04.06.2021 SB2021060414
#VU51053 - Storing Passwords in a Recoverable Format
CVE-2020-8296
CWE-257 Low
No
No
20.0.0 02.03.2021 SB2021030213
#VU51013 - Improper Access Control
CVE-2021-22877
CWE-284 Low
No
No
20.0.6 01.03.2021 SB2021030114
#VU51011 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-22878
CWE-79 Low
No
No
20.0.6 01.03.2021 SB2021030114
#VU49976 - Resource exhaustion
CVE-2020-8295
CWE-400 Medium
No
No
20.0.0 25.01.2021 SB2021012519
#VU49975 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-8294
CWE-79 Low
No
No
18.0.11, 19.0.5, 20.0.2 25.01.2021 SB2021012518
#VU49974 - Resource Management Errors
CVE-2020-8293
CWE-399 Medium
No
No
18.0.11, 19.0.5, 20.0.2 25.01.2021 SB2021012518
#VU27958 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-8155
CWE-79 Low
No
No
18.0.3 18.05.2020 SB2020051801
SB2020051802
SB2020051803
and 1 more
#VU27957 -
CVE-2020-8154
Medium
No
No
18.0.3 18.05.2020 SB2020051801
SB2020051802
SB2020051803
and 1 more
#VU30325 - Server-Side Request Forgery (SSRF)
CVE-2020-8138
CWE-918 Medium
No
No
17.0.2 20.03.2020 SB2020032012
#VU30326 - Missing Authorization
CVE-2020-8139
CWE-862 Medium
No
No
18.0.1 20.03.2020 SB2020032013
#VU30384 -
CVE-2020-8117
Low
No
No
14.0.4 04.02.2020 SB2020020427


Showing elements 81 - 100 out of 136