ON
Vendor
ONLYOFFICE
38
CVEs
2
On KEV
2
New 30D
Products
DS9.8
Document Server
ONLYOFFICE
22 CVEs1 on KEV1 new
DO9.8
Docs
ONLYOFFICE
3 CVEs1 on KEV0 new
DO4.0
DocumentServer
ONLYOFFICE
1 CVEs0 on KEV1 new
SE9.8
Server
Onlyoffice
6 CVEs0 on KEV0 new
CO9.8
Core
Onlyoffice
2 CVEs0 on KEV0 new
ON9.8
Onlyoffice
Onlyoffice
2 CVEs0 on KEV0 new
GT9.8
Google Translate
Onlyoffice
1 CVEs0 on KEV0 new
WO5.4
Workspace
Onlyoffice
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-110652 | DO DocumentServer ONLYOFFICE | 4.0 | Oct 14 | ONLYOFFICE DocumentServer before 10.0.0 SSRF via downloadfile isInJwtToken Bypass |
| CVE-2026-110385 | DS Document Server ONLYOFFICE | 8.7 | Oct 14 | A remote code execution vulnerability in ONLYOFFICE Document Server versions before10.0.0 allows an authenticated attacker with a valid Inbox-compatible JWT to execute arbitrary… |
| CVE-2025-68936 | DS Document Server Onlyoffice | 6.1 | Dec 25 | ONLYOFFICE Docs before 9.2.1 allows XSS via the Color theme name |
| CVE-2025-68935 | DS Document Server Onlyoffice | 6.1 | Dec 25 | ONLYOFFICE Docs before 9.2.1 allows XSS via the Font field for the Multilevel list settings window |
| CVE-2023-46988 | DS Document Server Onlyoffice | 6.7 | Apr 1 | Path Traversal vulnerability in ONLYOFFICE Document Server before v8.0.1 allows a remote attacker to copy arbitrary files by manipulating the fileExt parameter in the… |
| CVE-2023-50883 | DS Document Server Onlyoffice | 6.1 | Sep 9 | ONLYOFFICE Docs before 8.0.1 allows XSS because a macro is an immediately-invoked function expression (IIFE), and therefore a sandbox escape is possible by directly calling the… |
| CVE-2024-44085 | ON Onlyoffice Onlyoffice | 6.1 | Sep 9 | ONLYOFFICE Docs before 8.1.0 allows XSS via a GeneratorFunction Object attack against a macro |
| CVE-2023-30188 | DS Document Server Onlyoffice | 7.5 | Aug 14 | Memory Exhaustion vulnerability in ONLYOFFICE Document Server 4.0.3 through 7.3.2 allows remote attackers to cause a denial of service via crafted JavaScript file |
| CVE-2023-30187 | DS Document Server Onlyoffice | 9.8 | Aug 14 | An out of bounds memory access vulnerability in ONLYOFFICE DocumentServer 4.0.3 through 7.3.2 allows remote attackers to run arbitrary code via crafted JavaScript file |
| CVE-2023-30186 | DS Document Server Onlyoffice | 9.8 | Aug 14 | A use after free issue discovered in ONLYOFFICE DocumentServer 4.0.3 through 7.3.2 allows remote attackers to run arbitrary code via crafted JavaScript file |
| CVE-2023-34939 | ON Onlyoffice Onlyoffice | 9.8 | Jun 22 | Onlyoffice Community Server before v12.5.2 was discovered to contain a remote code execution (RCE) vulnerability via the component UploadProgress.ashx |
| CVE-2022-48422 | DS Document Server Onlyoffice | 7.8 | Mar 19 | ONLYOFFICE Docs through 7.3 on certain Linux distributions allows local users to gain privileges via a Trojan horse libgcc_s.so.1 in the current working directory, which may be… |
| CVE-2022-47412 | WO Workspace Onlyoffice | 5.4 | Feb 7 | Given a malicious document provided by an attacker, the ONLYOFFICE Workspace DMS is vulnerable to a stored (persistent, or "Type II") cross-site scripting (XSS) condition |
| CVE-2021-43449 | SE Server Onlyoffice | 8.1 | Jan 23 | ONLYOFFICE all versions as of 2021-11-08 is vulnerable to Server-Side Request Forgery (SSRF) |
| CVE-2021-43448 | SE Server Onlyoffice | 5.3 | Jan 23 | ONLYOFFICE all versions as of 2021-11-08 is vulnerable to Improper Input Validation |
| CVE-2021-43447 | SE Server Onlyoffice | 7.5 | Jan 23 | ONLYOFFICE all versions as of 2021-11-08 is affected by Incorrect Access Control |
| CVE-2021-43446 | SE Server Onlyoffice | 6.1 | Jan 23 | ONLYOFFICE all versions as of 2021-11-08 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2021-43445 | SE Server Onlyoffice | 9.8 | Jan 23 | ONLYOFFICE all versions as of 2021-11-08 is affected by Incorrect Access Control |
| CVE-2021-43444 | SE Server Onlyoffice | 7.5 | Jan 23 | ONLYOFFICE all versions as of 2021-11-08 is affected by Incorrect Access Control |
| CVE-2022-29777 | DS Document Server Onlyoffice | 9.8 | Jun 2 | Onlyoffice Document Server v6.0.0 and below and Core 6.1.0.26 and below were discovered to contain a heap overflow via the component… |
| CVE-2022-29776 | DS Document Server Onlyoffice | 9.8 | Jun 2 | Onlyoffice Document Server v6.0.0 and below and Core 6.1.0.26 and below were discovered to contain a stack overflow via the component DesktopEditor/common/File.cpp |
| CVE-2022-24229 | DS Document Server Onlyoffice | 6.1 | Apr 8 | A cross-site scripting (XSS) vulnerability in ONLYOFFICE Document Server Example before v7.0.0 allows remote attackers inject arbitrary HTML or JavaScript through /example/editor |
| CVE-2021-40864 | GT Google Translate Onlyoffice | 9.8 | Sep 10 | The Translate plugin 6.1.x through 6.3.x before 6.3.0.72 for ONLYOFFICE Document Server lacks escape calls for the msg.data and text fields |
| CVE-2021-25833 | DS Document Server Onlyoffice | 9.8 | Mar 1 | A file extension handling issue was found in [server] module of ONLYOFFICE DocumentServer v4.2.0.71-v5.6.0.21 |
| CVE-2021-25832 | DS Document Server Onlyoffice | 9.8 | Mar 1 | A heap buffer overflow vulnerability inside of BMP image processing was found at [core] module of ONLYOFFICE DocumentServer v4.0.0-9-v6.0.0 |
| CVE-2021-25831 | DS Document Server Onlyoffice | 9.8 | Mar 1 | A file extension handling issue was found in [core] module of ONLYOFFICE DocumentServer v4.0.0-9-v5.6.3 |
| CVE-2021-25830 | DS Document Server Onlyoffice | 9.8 | Mar 1 | A file extension handling issue was found in [core] module of ONLYOFFICE DocumentServer v4.2.0.236-v5.6.4.13 |
| CVE-2021-25829 | DS Document Server Onlyoffice | 7.5 | Mar 1 | An improper binary stream data handling issue was found in the [core] module of ONLYOFFICE DocumentServer v4.0.0-9-v5.6.3 |
| CVE-2021-3199 In wildKEV | DS Document Server Onlyoffice | 9.8 | Jan 22 | ONLYOFFICE Docs Server Path Traversal Vulnerability |
| CVE-2020-11537 | DS Document Server Onlyoffice | 9.8 | Apr 15 | A SQL Injection issue was discovered in ONLYOFFICE Document Server 5.5.0 |
| CVE-2020-11536 | DS Document Server Onlyoffice | 9.8 | Apr 15 | An issue was discovered in ONLYOFFICE Document Server 5.5.0 |
| CVE-2020-11535 | DS Document Server Onlyoffice | 9.8 | Apr 15 | An issue was discovered in ONLYOFFICE Document Server 5.5.0 |
| CVE-2020-11534 | DS Document Server Onlyoffice | 9.8 | Apr 15 | An issue was discovered in ONLYOFFICE Document Server 5.5.0 |