OW
Product
ownCloud
On CISA KEVExploited in the wild
118
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 4Medium 30Low 2
Watch
Add ownCloud to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-49105 In wildKEV | 9.8 | Nov 21 | ownCloud Improper Authentication Vulnerability Affected: All versions, or not specified |
| CVE-2019-25337 | 9.8 | Feb 12 | OwnCloud 8.1.8 - Username Disclosure Affected: 8.1.8 |
| CVE-2021-35946 | 9.8 | Sep 7 | A receiver of a federated share with access to the database with ownCloud version before 10.8 could update the permissions and therefore elevate their own permissions Affected: before 10.8.0 |
| CVE-2014-2052 | 9.8 | Feb 11 | Zend Framework, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other… Affected: before 5.0.15 |
| CVE-2014-2048 | 9.8 | Mar 26 | The user_openid app in ownCloud Server before 5.0.15 allows remote attackers to obtain access by leveraging an insecure OpenID implementation Affected: before 5.0.15 |
| CVE-2020-28645 | 9.1 | Feb 9 | Deleting users with certain names caused system files to be deleted Affected: before 10.6.0 |
Showing 6