Login Request a demo
ON
Product
online
by CollaboraOnline · last CVE Feb 5, 2026
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 1High 3Medium 6Low 0
Severity
All severities10Critical1High3Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add online to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-66208
9.8
2%
Dec 3
Configuration-Dependent RCE (OS Command Injection) in richdocumentscode proxy
Affected: < 25.04.702
CVE-2025-27791
8.3
0%
Apr 15
Collabora Online Vulnerable to Arbitrary File Write
Affected: >= 24.04.1.1, < 24.04.13.1; >= 23.05.0, < 23.05.19; < 22.05.25
CVE-2024-37311
8.2
0%
Aug 23
Collabora Online's remote host TLS certificates are not fully verified
Affected: >= 24.04.1.1, < 24.04.4.3; >= 23.05.0-1, < 23.05.14-1; < 22.05.23.1
CVE-2023-49788
7.2
0%
Dec 8
Improper handling of browser-side provided input in richdocuments path handling
Affected: < 23.5.602
CVE-2025-24796
6.3
1%
Mar 6
Remote Code Execution within Collabora Online jail with Macros Enabled
Affected: < 22.05.25; >= 23.05.1, < 23.05.19; >= 24.04.1.1, < 24.04.12.4
CVE-2024-45045
6.1
0%
Aug 29
JavaScript Injection via url encoded values in links in Collabora Office Android
Affected: Collabora Office (Android): < 24.04.6.2
CVE-2024-29182
6.1
0%
Apr 4
Collabora Online Stored Cross-Site-Scripting vulnerability via tooltip
Affected: >= 23, < 23.05.10.1
CVE-2023-49782
6.1
0%
Dec 8
Cross-Site-Scripting vulnerability in error message passing in richdocumentscode
Affected: < 23.5.601
CVE-2026-23623
5.3
0%
Feb 5
Collabora Online vulnerable to Authorization Bypass
Affected: Collabora Online < 25.04.7.5; Collabora Online < 24.04.17.3; Collabora Online < 23.05.20.1; Collabora Online Development Edition < 25.04.08.2
CVE-2024-25114
5.3
0%
Mar 11
Sensitive Information Disclosure (JailID) to users in Collabora Online
Affected: >= 23.0.0, < 23.05.9; >= 22.0.0, < 22.05.22; < 21.11.9.4
Showing 10