Known vulnerabilities in Nextcloud Server - page 7

Vendor: Nextcloud
Software CPE: cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 136
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Nextcloud Server Nextcloud Server is affected by 136 known vulnerabilities: 12 high, 51 medium, 73 low Critical High Medium Low

Vulnerabilities (136)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU14215 - Improper Check for Dropped Privileges
CVE-2018-3762
CWE-273 Low
No
No
12.0.8, 13.0.3 07.08.2018 SB2018080714
SB2018071125
#VU12595 - Authorization Bypass Through User-Controlled SQL Primary Key
CVE-2017-0936
CWE-566 Low
No
No
- 11.05.2018 SB2018020717
#VU38373 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-7855
CWE-79 Low
No
No
- 31.08.2017 SB2017083135
#VU31419 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-0891
CWE-79 Low
No
No
11.0.3 08.05.2017 SB2017050807
#VU31420 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-0893
CWE-79 Low
No
No
11.0.3 08.05.2017 SB2017050807
#VU31421 - Exposure of sensitive information to an unauthorized actor
CVE-2017-0895
CWE-200 Low
No
No
11.0.2 08.05.2017 SB2017050808
#VU39271 - Incorrect Permission Assignment for Critical Resource
CVE-2017-0883
CWE-732 Medium
No
No
- 05.04.2017 SB2017040509
#VU31428 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-9465
CWE-79 Low
No
No
10.0.1 28.03.2017 SB2017032809
#VU31429 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-9466
CWE-79 Low
No
No
10.0.1 28.03.2017 SB2017032809
#VU31430 - Improper Access Control
CVE-2016-9467
CWE-284 Medium
No
No
10.0.1 28.03.2017 SB2017032809
#VU31431 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-9459
CWE-79 Low
No
No
9.0.52 28.03.2017 SB2017032810
#VU31432 - Improper Access Control
CVE-2016-9461
CWE-284 Low
No
No
9.0.52 28.03.2017 SB2017032810
#VU31433 - Improper Access Control
CVE-2016-9462
CWE-284 Low
No
No
9.0.52 28.03.2017 SB2017032810
#VU31434 - Improper Authentication
CVE-2016-9463
CWE-287 High
No
No
10.0.1 28.03.2017 SB2017032809
#VU31435 - Improper Authorization
CVE-2016-9464
CWE-285 Low
No
No
9.0.54 28.03.2017 SB2017032811
#VU46127 - Improper input validation
CVE-2009-0778
CWE-20 Medium
No
No
- 12.03.2009 SB2009031201


Showing elements 121 - 140 out of 136