Known vulnerabilities in ownCloud Server

Vendor: ownCloud
Software CPE: cpe:2.3:a:owncloud:owncloud_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 24
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ownCloud Server ownCloud Server is affected by 24 known vulnerabilities: 1 high, 9 medium, 14 low Critical High Medium Low

Vulnerabilities (24)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU97428 - Improper Access Control
CVE-2024-37011
CWE-284 Low
No
No
10.15.0 17.09.2024 SB2024091728
#VU97427 - Authorization Bypass Through User-Controlled Key
CVE-2024-37010
CWE-639 Medium
No
No
10.15.0 17.09.2024 SB2024091728
#VU97426 - Server-Side Request Forgery (SSRF)
CVE-2024-37012
CWE-918 Medium
No
No
10.15.0 17.09.2024 SB2024091728
#VU97425 - Improper Handling of Extra Parameters
CVE-2024-37009
CWE-235 Low
No
No
10.15.0 17.09.2024 SB2024091728
#VU97420 - Cross-Site Request Forgery (CSRF)
CVE-2024-42014
CWE-352 Low
No
No
10.15.0 17.09.2024 SB2024091728
#VU88999 - Improper input validation
CVE-2024-26326
CWE-20 Low
No
No
10.14.0 25.04.2024 SB2024042537
#VU88998 - Improper input validation
CVE-2024-26325
CWE-20 Low
No
No
10.14.0 25.04.2024 SB2024042537
#VU88995 - Improper input validation
CVE-2024-26320
CWE-20 Low
No
No
10.13.3 25.04.2024 SB2024042534
#VU83563 - Improper Authentication
CVE-2023-49105
CWE-287 High
Available
No
10.13.1 29.11.2023 SB2023112918
#VU73752 - Expected Behavior Violation
CWE-440 Medium
No
No
10.12.0 16.03.2023 SB2023031623
#VU70638 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2022-43679
CWE-451 Medium
No
No
10.11.0 03.01.2023 SB2023010314
#VU64202 - Exposure of sensitive information to an unauthorized actor
CVE-2022-31649
CWE-200 Medium
No
No
10.10.0 13.06.2022 SB2022061313
#VU55564 - Exposure of sensitive information to an unauthorized actor
CVE-2021-35947
CWE-200 Low
No
No
10.8.0 04.08.2021 SB2021080401
#VU55563 - Session Fixation
CVE-2021-35948
CWE-384 Low
No
No
10.8.0 04.08.2021 SB2021080401
#VU55562 - Improper Protection of Alternate Path
CVE-2021-35949
CWE-424 Low
No
No
10.8.0 04.08.2021 SB2021080401
#VU55561 - Permissions, Privileges, and Access Controls
CVE-2021-35946
CWE-264 Medium
No
No
10.8.0 04.08.2021 SB2021080401
#VU53346 - Exposure of sensitive information to an unauthorized actor
CVE-2021-29659
CWE-200 Medium
No
No
10.7.0 19.05.2021 SB2021051911
#VU25684 - Incorrect Use of Privileged APIs
CWE-648 Low
No
No
10.3.1 28.02.2020 SB2020022809
#VU25683 - Server-Side Request Forgery (SSRF)
CWE-918 Low
No
No
10.3.2 28.02.2020 SB2020022810
#VU25682 - Improper Access Control
CWE-284 Low
No
No
10.4.0 28.02.2020 SB2020022811


Showing elements 1 - 20 out of 24