2017-05-07

2017-05-08

2017-05-09

All (2) Critical (2) High (8) Medium (14) Low (2)

CVE-2017-0892 May 08, 20:29 LOW PATCH Monitor

Nextcloud Server before 11.0.3 is vulnerable to an improper session handling allowed an application specific password without permission to the files access to the users file. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable, low attack complexity.

Authentication Bypass Nextcloud Server Nextcloud

NVD

CVSS 3.1

3.5

EPSS

0.2%

CVE-2017-0895 May 08, 20:29 LOW Monitor

Nextcloud Server before 10.0.4 and 11.0.2 are vulnerable to disclosure of calendar and addressbook names to other logged-in users. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Nextcloud Server Nextcloud

NVD

CVSS 3.0

3.5

EPSS

0.1%