Skip to main content

Collaboraoffice

7 CVEs vendor

Monthly

CVE-2024-29182 Apr 04, 15:15 MEDIUM This Month

Collabora Online is a collaborative online office suite based on LibreOffice. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Microsoft Collabora Online Collaboraoffice
NVD GitHub
CVSS 3.1
6.1
EPSS
0.3%
CVE-2023-49788 Dec 08, 20:15 HIGH This Week

Collabora Online is a collaborative online office suite based on LibreOffice technology. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Path Traversal Microsoft Richdocumentscode Collaboraoffice
NVD GitHub
CVSS 3.1
7.2
EPSS
0.5%
CVE-2023-49782 Dec 08, 20:15 MEDIUM This Month

Collabora Online is a collaborative online office suite based on LibreOffice technology. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP XSS Microsoft Nextcloud Richdocumentscode +1
NVD GitHub
CVSS 3.1
6.1
EPSS
0.4%
CVE-2023-48314 Dec 01, 22:15 MEDIUM This Month

Collabora Online is a collaborative online office suite based on LibreOffice technology. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP XSS Microsoft Nextcloud Collabora Online +1
NVD GitHub
CVSS 3.1
6.1
EPSS
0.4%
CVE-2023-34088 May 31, 19:15 MEDIUM This Month

Collabora Online is a collaborative online office suite. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Microsoft Collabora Online Collaboraoffice
NVD GitHub
CVSS 3.1
5.4
EPSS
0.4%
CVE-2021-25630 Feb 23, 16:15 HIGH This Week

"loolforkit" is a privileged program that is supposed to be run by a special, non-privileged "lool" user. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Online Collaboraoffice
NVD GitHub
CVSS 3.1
7.8
EPSS
0.3%
CVE-2020-12432 Jul 21, 14:15 MEDIUM POC This Month

The WOPI API integration for Vereign Collabora CODE through 4.2.2 does not properly restrict delivery of JavaScript to a victim's browser, and lacks proper MIME type access control, which could lead. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Collabora Online Development Edition Collaboraoffice
NVD GitHub
CVSS 3.1
6.1
EPSS
0.9%
EPSS 0% CVSS 6.1
MEDIUM This Month

Collabora Online is a collaborative online office suite based on LibreOffice. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Microsoft Collabora Online +1
NVD GitHub
EPSS 0% CVSS 7.2
HIGH This Week

Collabora Online is a collaborative online office suite based on LibreOffice technology. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Path Traversal Microsoft Richdocumentscode +1
NVD GitHub
EPSS 0% CVSS 6.1
MEDIUM This Month

Collabora Online is a collaborative online office suite based on LibreOffice technology. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP XSS Microsoft +3
NVD GitHub
EPSS 0% CVSS 6.1
MEDIUM This Month

Collabora Online is a collaborative online office suite based on LibreOffice technology. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP XSS Microsoft +3
NVD GitHub
EPSS 0% CVSS 5.4
MEDIUM This Month

Collabora Online is a collaborative online office suite. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Microsoft Collabora Online +1
NVD GitHub
EPSS 0% CVSS 7.8
HIGH This Week

"loolforkit" is a privileged program that is supposed to be run by a special, non-privileged "lool" user. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Online Collaboraoffice
NVD GitHub
EPSS 1% CVSS 6.1
MEDIUM POC This Month

The WOPI API integration for Vereign Collabora CODE through 4.2.2 does not properly restrict delivery of JavaScript to a victim's browser, and lacks proper MIME type access control, which could lead. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Collabora Online Development Edition Collaboraoffice
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy