Known vulnerabilities in Nextcloud Server - page 6

Vendor: Nextcloud
Software CPE: cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 136
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Nextcloud Server Nextcloud Server is affected by 136 known vulnerabilities: 12 high, 51 medium, 73 low Critical High Medium Low

Vulnerabilities (136)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU30385 - Server-Side Request Forgery (SSRF)
CVE-2020-8118
CWE-918 Medium
No
No
16.0.2 04.02.2020 SB2020020428
#VU30386 -
CVE-2020-8121
High
No
No
15.0.0 04.02.2020 SB2020020429
#VU30387 - Improper input validation
CVE-2020-8122
CWE-20 Low
No
No
15.0.0 04.02.2020 SB2020020429
#VU30388 - Session Fixation
CVE-2019-15612
CWE-384 Medium
No
No
15.0.3 04.02.2020 SB2020020430
#VU30389 - Improper Authentication
CVE-2019-15617
CWE-287 Medium
No
No
17.0.1 04.02.2020 SB2020020431
#VU30390 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-15618
CWE-79 Low
No
No
15.0.6 04.02.2020 SB2020020432
#VU30391 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-15619
CWE-79 Low
No
No
16.0.4 04.02.2020 SB2020020433
#VU30392 -
CVE-2019-15621
Medium
No
No
16.0.2 04.02.2020 SB2020020428
#VU30393 - Exposure of sensitive information to an unauthorized actor
CVE-2019-15623
CWE-200 Medium
No
No
16.0.2 04.02.2020 SB2020020428
#VU30394 - Improper input validation
CVE-2019-15624
CWE-20 Medium
No
No
15.0.8 04.02.2020 SB2020020434
#VU35148 - Insufficiently Protected Credentials
CVE-2019-17393
CWE-522 High
No
No
- 18.10.2019 SB2019101812
#VU30977 - Exposure of sensitive information to an unauthorized actor
CVE-2019-5449
CWE-200 Low
No
No
15.0.1 30.07.2019 SB2019073021
#VU30978 - Improper input validation
CVE-2019-5451
CWE-20 Medium
No
No
3.6.1 30.07.2019 SB2019073022
#VU36247 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2019-5748
CWE-611 High
No
No
- 09.01.2019 SB2019010912
#VU31186 - Session Fixation
CVE-2018-16463
CWE-384 Low
No
No
13.0.3 30.10.2018 SB2018103042
#VU31187 - Improper Check for Dropped Privileges
CVE-2018-16466
CWE-273 High
No
No
13.0.6 30.10.2018 SB2018103043
#VU14481 - Improper Authentication
CVE-2018-3775
CWE-287 Low
No
No
12.0.3 21.08.2018 SB2018082107
#VU14480 - Improper input validation
CVE-2018-3776
CWE-20 Low
No
No
11.0.5, 12.0.3 21.08.2018 SB2018082107
#VU14478 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-3780
CWE-79 Low
No
No
13.0.5 20.08.2018 SB2018082107
SB2018082703
SB2018082704
and 3 more
#VU14214 - Improper input validation
CVE-2018-3761
CWE-20 Low
No
No
12.0.8, 13.0.3 06.08.2018 SB2018080714
SB2018071125


Showing elements 101 - 120 out of 136