DS
Product
Document Server
On CISA KEVExploited in the wild
22
CVEs
1
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 13High 4Medium 5Low 0
Watch
Add Document Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-110385 | 8.7 | Oct 14 | A remote code execution vulnerability in ONLYOFFICE Document Server versions before10.0.0 allows an authenticated attacker with a valid Inbox-compatible JWT to execute arbitrary… Affected: before 10.0 |
| CVE-2022-48422 | 7.8 | Mar 19 | ONLYOFFICE Docs through 7.3 on certain Linux distributions allows local users to gain privileges via a Trojan horse libgcc_s.so.1 in the current working directory, which may be… Affected: through 7.3.0 |
| CVE-2023-30188 | 7.5 | Aug 14 | Memory Exhaustion vulnerability in ONLYOFFICE Document Server 4.0.3 through 7.3.2 allows remote attackers to cause a denial of service via crafted JavaScript file Affected: 4.0.3 through 7.3.2 |
| CVE-2021-25829 | 7.5 | Mar 1 | An improper binary stream data handling issue was found in the [core] module of ONLYOFFICE DocumentServer v4.0.0-9-v5.6.3 Affected: 4.0.0-9 through 5.6.3 |
Showing 4