Skip to main content

Nextcloud Server

163 CVEs product

Monthly

CVE-2023-26482 Mar 30, 19:15 HIGH POC PATCH Act Now

Nextcloud server is an open source home cloud implementation. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. This OS Command Injection vulnerability could allow attackers to execute arbitrary operating system commands on the host.

Command Injection Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
8.8
EPSS
4.2%
CVE-2025-64011 Dec 12, 17:15 MEDIUM POC This Month

Authenticated information disclosure in Nextcloud Server 30.0.0 lets any user holding a valid account view previews of files owned by other users by manipulating the fileId parameter on the /core/preview endpoint, sidestepping sharing permissions and any prior sharing relationship with the victim. Exploitation requires authentication but no special privilege, and publicly available exploit code exists (a Gist and a Google Drive-hosted proof of concept are referenced by NVD); CISA KEV does not list this CVE, and EPSS is low at 0.27% (19th percentile), so it is a moderate-severity disclosure issue rather than a top-tier priority. Practical exposure is concentrated in multi-user and multi-tenant deployments where many accounts and many previewable files coexist; single-user instances are largely unaffected in practice.

Authentication Bypass Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
4.3
EPSS
0.3%
CVE-2025-66552 Dec 05, 17:16 MEDIUM PATCH This Month

A security vulnerability in Nextcloud Server and Enterprise Server (CVSS 4.3). Remediation should follow standard vulnerability management procedures. Vendor patch is available.

Information Disclosure Debian Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
4.3
EPSS
0.0%
CVE-2025-66547 Dec 05, 17:16 MEDIUM PATCH This Month

Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server and Enterprise Server prior to 31.0.1, non-privileged users can modify tags on files they should not have access to via bulk tagging. This vulnerability is fixed in 31.0.1.

Authentication Bypass Debian Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
4.3
EPSS
0.0%
CVE-2025-66512 Dec 05, 17:16 MEDIUM PATCH This Month

Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server and Server Enterprise prior to 31.0.12 and 32.0.3, a missing sanitization allowed malicious users to circumvent the content security policy when a malicious user manages to trick a user it viewing an uploaded SVG outside of the Nextcloud Servers web page.

XSS Debian Nextcloud Server Nextcloud Suse
NVD GitHub
CVSS 3.1
5.4
EPSS
0.0%
CVE-2025-66510 Dec 05, 17:16 MEDIUM PATCH This Month

A security vulnerability in Nextcloud Server (CVSS 4.5) that allows an authenticated user. Remediation should follow standard vulnerability management procedures. Vendor patch is available.

Information Disclosure Debian Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
4.5
EPSS
0.0%
CVE-2025-47794 May 16, 15:15 LOW Monitor

Nextcloud Server is a self hosted personal cloud system. Rated low severity (CVSS 2.6), this vulnerability is remotely exploitable. No vendor patch available.

Authentication Bypass Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
2.6
EPSS
0.1%
CVE-2025-47793 May 16, 15:15 MEDIUM PATCH Monitor

Nextcloud Server is a self hosted personal cloud system, and the Nextcloud Groupfolders app provides admin-configured folders shared by everyone in a group or team. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. This Allocation of Resources Without Limits vulnerability could allow attackers to exhaust system resources through uncontrolled allocation.

Denial Of Service Nextcloud Server Nextcloud Group Folders
NVD GitHub
CVSS 3.1
4.3
EPSS
0.3%
CVE-2025-47791 May 16, 15:15 MEDIUM PATCH This Month

Nextcloud Server is a self hosted personal cloud system. Rated medium severity (CVSS 4.3), this vulnerability is no authentication required, low attack complexity. This Server-Side Request Forgery (SSRF) vulnerability could allow attackers to make the server perform requests to unintended internal or external resources.

SSRF Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
4.3
EPSS
0.2%
CVE-2025-47790 May 16, 14:15 MEDIUM This Month

Nextcloud Server is a self hosted personal cloud system. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable. No vendor patch available.

PHP Authentication Bypass Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
6.4
EPSS
0.1%
CVE-2024-52514 Nov 15, 18:15 LOW PATCH Monitor

Nextcloud Server is a self hosted personal cloud system. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable, low attack complexity.

Authentication Bypass Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
3.5
EPSS
0.5%
CVE-2024-52513 Nov 15, 18:15 MEDIUM PATCH This Month

Nextcloud Server is a self hosted personal cloud system. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
4.3
EPSS
0.5%
CVE-2024-52525 Nov 15, 17:15 HIGH PATCH This Week

Nextcloud Server is a self hosted personal cloud system. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

PHP Information Disclosure Redis Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
7.5
EPSS
0.3%
CVE-2024-52523 Nov 15, 17:15 MEDIUM PATCH This Month

Nextcloud Server is a self hosted personal cloud system. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
6.5
EPSS
0.6%
CVE-2024-52521 Nov 15, 17:15 MEDIUM PATCH This Month

Nextcloud Server is a self hosted personal cloud system. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
5.3
EPSS
0.4%
CVE-2024-52520 Nov 15, 17:15 MEDIUM PATCH This Month

Nextcloud Server is a self hosted personal cloud system. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Uncontrolled Resource Consumption vulnerability could allow attackers to cause denial of service by exhausting system resources.

Denial Of Service Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
6.5
EPSS
0.8%
CVE-2024-52519 Nov 15, 17:15 HIGH PATCH This Week

Nextcloud Server is a self hosted personal cloud system. Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
8.2
EPSS
0.5%
CVE-2024-52518 Nov 15, 17:15 MEDIUM This Month

Nextcloud Server is a self hosted personal cloud system. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
5.4
EPSS
0.5%
CVE-2024-52517 Nov 15, 17:15 MEDIUM PATCH This Month

Nextcloud Server is a self hosted personal cloud system. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
5.9
EPSS
0.6%
CVE-2024-52516 Nov 15, 17:15 MEDIUM PATCH This Month

Nextcloud Server is a self hosted personal cloud system. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. This Improper Privilege Management vulnerability could allow attackers to escalate privileges to gain unauthorized elevated access.

Privilege Escalation Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
4.3
EPSS
0.4%
CVE-2024-52515 Nov 15, 17:15 MEDIUM PATCH This Month

Nextcloud Server is a self hosted personal cloud system. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
6.5
EPSS
0.7%
CVE-2024-37887 Jun 14, 16:15 LOW PATCH Monitor

Nextcloud Server is a self hosted personal cloud system. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable, low attack complexity.

Authentication Bypass Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
3.5
EPSS
0.4%
CVE-2024-37884 Jun 14, 16:15 MEDIUM PATCH This Month

Nextcloud Server is a self hosted personal cloud system. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity.

Authentication Bypass Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
5.4
EPSS
0.4%
CVE-2024-37882 Jun 14, 16:15 HIGH PATCH This Week

Nextcloud Server is a self hosted personal cloud system. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity.

Authentication Bypass Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
8.1
EPSS
0.5%
CVE-2024-37315 Jun 14, 16:15 MEDIUM PATCH This Month

Nextcloud Server is a self hosted personal cloud system. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity.

Authentication Bypass Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
4.3
EPSS
0.4%
CVE-2024-37314 Jun 14, 15:15 LOW PATCH Monitor

Nextcloud Photos is a photo management app. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable, low attack complexity.

Authentication Bypass Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
3.5
EPSS
0.4%
CVE-2024-37313 Jun 14, 15:15 HIGH PATCH This Week

Nextcloud server is a self hosted personal cloud system. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Improper Authentication vulnerability could allow attackers to bypass authentication mechanisms to gain unauthorized access.

Authentication Bypass Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
7.5
EPSS
0.4%
CVE-2024-22403 Jan 18, 20:15 LOW PATCH Monitor

Nextcloud server is a self hosted personal cloud system. Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
3.7
EPSS
0.5%
CVE-2023-49792 Dec 22, 17:15 CRITICAL PATCH Act Now

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
9.8
EPSS
1.0%
CVE-2023-49791 Dec 22, 17:15 MEDIUM PATCH This Month

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity.

Authentication Bypass Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
5.4
EPSS
0.6%
CVE-2023-48306 Nov 21, 23:15 CRITICAL POC Act Now

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

SSRF Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
9.8
EPSS
0.8%
CVE-2023-48305 Nov 21, 23:15 MEDIUM POC PATCH This Month

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity. Public exploit code available.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
4.4
EPSS
0.2%
CVE-2023-48304 Nov 21, 22:15 MEDIUM POC PATCH This Month

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Authentication Bypass Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
4.3
EPSS
0.6%
CVE-2023-48303 Nov 21, 22:15 LOW PATCH Monitor

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Rated low severity (CVSS 2.7), this vulnerability is remotely exploitable, low attack complexity.

Authentication Bypass Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
2.7
EPSS
0.7%
CVE-2023-48302 Nov 21, 22:15 MEDIUM PATCH This Month

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
5.4
EPSS
0.6%
CVE-2023-48301 Nov 21, 22:15 MEDIUM POC PATCH This Month

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

XSS Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
5.4
EPSS
0.6%
CVE-2023-48239 Nov 21, 21:15 HIGH POC PATCH This Week

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Authentication Bypass Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
7.1
EPSS
0.9%
CVE-2023-45151 Oct 16, 19:15 HIGH PATCH This Week

Nextcloud server is an open source home cloud platform. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
8.8
EPSS
0.5%
CVE-2023-45148 Oct 16, 19:15 MEDIUM PATCH This Month

Nextcloud is an open source home cloud server. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Redis Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
4.3
EPSS
0.7%
CVE-2023-39960 Oct 13, 13:15 HIGH PATCH This Week

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
7.5
EPSS
0.6%
CVE-2023-39963 Aug 10, 18:15 HIGH PATCH This Week

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Authentication Bypass Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
7.8
EPSS
0.2%
CVE-2023-39962 Aug 10, 18:15 HIGH PATCH This Week

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Rated high severity (CVSS 7.7), this vulnerability is remotely exploitable, low attack complexity.

Authentication Bypass Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
7.7
EPSS
0.8%
CVE-2023-39961 Aug 10, 18:15 MEDIUM PATCH This Month

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
4.3
EPSS
0.5%
CVE-2023-39959 Aug 10, 18:15 MEDIUM PATCH This Month

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
5.3
EPSS
0.5%
CVE-2023-39958 Aug 10, 18:15 MEDIUM PATCH This Month

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
5.3
EPSS
0.6%
CVE-2023-39952 Aug 10, 14:15 MEDIUM PATCH This Month

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Authentication Bypass Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
6.5
EPSS
0.8%
CVE-2023-35928 Jun 23, 21:15 HIGH This Week

Nextcloud Server is a space for data storage on Nextcloud, a self-hosted productivity playform. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
8.8
EPSS
1.0%
CVE-2023-35927 Jun 23, 21:15 HIGH This Week

NextCloud Server and NextCloud Enterprise Server provide file storage for Nextcloud, a self-hosted productivity platform. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP Authentication Bypass Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
8.1
EPSS
0.8%
CVE-2023-35172 Jun 23, 21:15 CRITICAL Act Now

NextCloud Server and NextCloud Enterprise Server provide file storage for Nextcloud, a self-hosted productivity platform. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
9.1
EPSS
0.9%
CVE-2023-35171 Jun 23, 21:15 MEDIUM POC PATCH This Month

NextCloud Server and NextCloud Enterprise Server provide file storage for Nextcloud, a self-hosted productivity platform. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Open Redirect Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
6.1
EPSS
0.6%
CVE-2023-32320 Jun 22, 21:15 HIGH PATCH This Week

Nextcloud Server is a data storage system for Nextcloud, a self-hosted productivity platform. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
7.5
EPSS
0.9%
CVE-2023-32319 May 26, 23:15 MEDIUM PATCH This Month

Nextcloud server is an open source personal cloud implementation. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
6.5
EPSS
0.7%
CVE-2023-32318 May 26, 18:15 MEDIUM PATCH This Month

Nextcloud server provides a home for data. Rated medium severity (CVSS 6.7).

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
6.7
EPSS
0.2%
CVE-2023-28847 Apr 25, 17:15 HIGH POC PATCH This Week

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
7.5
EPSS
0.8%
CVE-2023-30539 Apr 17, 22:15 HIGH PATCH This Week

Nextcloud is a personal home server system. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

Authentication Bypass Nextcloud Server Nextcloud Nextcloud Files Automated Tagging
NVD GitHub
CVSS 3.1
8.8
EPSS
0.6%
CVE-2023-28834 Apr 03, 17:15 MEDIUM POC PATCH This Month

Nextcloud Server is an open source personal cloud server. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
4.3
EPSS
0.8%
CVE-2023-28844 Mar 31, 23:15 MEDIUM PATCH This Month

Nextcloud server is an open source home cloud implementation. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Authentication Bypass Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
6.5
EPSS
0.6%
CVE-2023-28835 Mar 30, 19:15 HIGH PATCH This Week

Nextcloud server is an open source home cloud implementation. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
7.5
EPSS
0.5%
CVE-2023-28833 Mar 30, 19:15 HIGH PATCH This Week

Nextcloud server is an open source home cloud implementation. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Path Traversal vulnerability could allow attackers to access files and directories outside the intended path.

Path Traversal Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
8.8
EPSS
0.8%
CVE-2023-28644 Mar 30, 19:15 HIGH PATCH This Week

Nextcloud server is an open source home cloud implementation. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Uncontrolled Resource Consumption vulnerability could allow attackers to cause denial of service by exhausting system resources.

Denial Of Service Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
7.5
EPSS
0.6%
CVE-2023-28643 Mar 30, 19:15 HIGH POC PATCH This Week

Nextcloud server is an open source home cloud implementation. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
8.8
EPSS
0.8%
CVE-2023-25817 Mar 27, 21:15 HIGH PATCH This Week

Nextcloud server is an open source, personal cloud implementation. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity.

Privilege Escalation Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
8.1
EPSS
0.6%
CVE-2023-25818 Mar 27, 20:15 HIGH PATCH This Week

Nextcloud server is an open source, personal cloud implementation. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
7.1
EPSS
0.6%
CVE-2023-25820 Mar 22, 19:15 HIGH PATCH This Week

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform, and Nextcloud Enterprise Server is the enterprise version of the file server software. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
7.8
EPSS
0.2%
CVE-2023-25821 Feb 25, 00:15 HIGH POC PATCH This Week

Nextcloud is an Open Source private cloud software. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Authentication Bypass Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
7.5
EPSS
0.9%
CVE-2023-25816 Feb 25, 00:15 MEDIUM POC PATCH This Month

Nextcloud is an Open Source private cloud software. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Denial Of Service Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
6.5
EPSS
1.4%
CVE-2023-25579 Feb 22, 19:15 HIGH PATCH This Week

Nextcloud server is a self hosted home cloud product. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Path Traversal vulnerability could allow attackers to access files and directories outside the intended path.

Path Traversal Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
7.5
EPSS
0.5%
CVE-2023-25162 Feb 13, 21:15 MEDIUM POC This Month

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

SSRF Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
5.3
EPSS
0.8%
CVE-2023-25161 Feb 13, 21:15 MEDIUM PATCH This Month

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
5.3
EPSS
0.7%
CVE-2023-25159 Feb 13, 17:15 MEDIUM This Month

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform, and Nextcloud Office is a document collaboration app for the same platform. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Microsoft Nextcloud Server Nextcloud Richdocuments
NVD GitHub
CVSS 3.1
5.3
EPSS
0.5%
CVE-2022-41970 Dec 01, 21:15 MEDIUM PATCH This Month

Nextcloud Server is an open source personal cloud server. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
5.3
EPSS
0.6%
CVE-2022-41969 Dec 01, 21:15 LOW PATCH Monitor

Nextcloud Server is an open source personal cloud server. Rated low severity (CVSS 2.7), this vulnerability is remotely exploitable, low attack complexity. This Uncontrolled Resource Consumption vulnerability could allow attackers to cause denial of service by exhausting system resources.

Denial Of Service Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
2.7
EPSS
0.8%
CVE-2022-41968 Dec 01, 21:15 MEDIUM PATCH This Month

Nextcloud Server is an open source personal cloud server. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Uncontrolled Resource Consumption vulnerability could allow attackers to cause denial of service by exhausting system resources.

Denial Of Service Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
5.3
EPSS
0.8%
CVE-2022-39346 Nov 25, 19:15 MEDIUM PATCH This Month

Nextcloud server is an open source personal cloud server. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Denial Of Service Fedora Nextcloud Server Nextcloud Nextcloud Enterprise Server +1
NVD GitHub
CVSS 3.1
6.5
EPSS
1.0%
CVE-2022-39364 Oct 27, 15:15 MEDIUM POC PATCH This Month

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Information Disclosure Microsoft Nextcloud Server Nextcloud Nextcloud Enterprise Server
NVD GitHub
CVSS 3.1
6.5
EPSS
0.5%
CVE-2022-39330 Oct 27, 14:15 MEDIUM PATCH This Month

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. This Uncontrolled Resource Consumption vulnerability could allow attackers to cause denial of service by exhausting system resources.

Denial Of Service Nextcloud Server Nextcloud Nextcloud Enterprise Server
NVD GitHub
CVSS 3.1
4.3
EPSS
0.8%
CVE-2022-39329 Oct 27, 14:15 MEDIUM PATCH This Month

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Nextcloud Server Nextcloud Nextcloud Enterprise Server
NVD GitHub
CVSS 3.1
5.3
EPSS
0.6%
CVE-2022-39211 Sep 16, 23:15 MEDIUM PATCH This Month

Nextcloud server is an open source personal cloud platform. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Server-Side Request Forgery (SSRF) vulnerability could allow attackers to make the server perform requests to unintended internal or external resources.

SSRF Nextcloud Server Nextcloud Nextcloud Enterprise Server
NVD GitHub
CVSS 3.1
5.3
EPSS
0.7%
CVE-2022-36074 Sep 15, 22:15 HIGH PATCH This Week

Nextcloud server is an open source personal cloud product. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Nextcloud Server Nextcloud Nextcloud Enterprise Server
NVD GitHub
CVSS 3.1
7.5
EPSS
0.6%
CVE-2022-31120 Aug 04, 17:15 LOW PATCH Monitor

Nextcloud server is an open source personal cloud solution. Rated low severity (CVSS 2.7), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
2.7
EPSS
0.7%
CVE-2022-31118 Aug 04, 17:15 MEDIUM PATCH This Month

Nextcloud server is an open source personal cloud solution. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Allocation of Resources Without Limits vulnerability could allow attackers to exhaust system resources through uncontrolled allocation.

PHP Denial Of Service Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
5.3
EPSS
0.6%
CVE-2022-31014 Jul 05, 18:15 LOW POC PATCH Monitor

Nextcloud server is an open source personal cloud server. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Command Injection Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
3.5
EPSS
2.4%
CVE-2022-29243 May 31, 17:15 MEDIUM PATCH This Month

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
4.3
EPSS
1.4%
CVE-2022-29163 May 20, 16:15 MEDIUM PATCH This Month

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
4.3
EPSS
1.0%
CVE-2022-24889 Apr 27, 15:15 MEDIUM POC This Month

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
4.3
EPSS
0.6%
CVE-2022-24888 Apr 27, 15:15 MEDIUM PATCH This Month

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity.

Code Injection Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
4.3
EPSS
1.2%
CVE-2022-24741 Mar 09, 22:15 MEDIUM POC PATCH This Month

Nextcloud server is an open source, self hosted cloud style services platform. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Denial Of Service Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
6.5
EPSS
1.6%
CVE-2021-41177 Oct 25, 22:15 HIGH PATCH This Week

Nextcloud is an open-source, self-hosted productivity platform. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity.

PHP Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
8.1
EPSS
1.5%
CVE-2021-32802 Sep 07, 22:15 CRITICAL Act Now

Nextcloud server is an open source, self hosted personal cloud. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
9.8
EPSS
2.6%
CVE-2021-32801 Sep 07, 22:15 MEDIUM This Month

Nextcloud server is an open source, self hosted personal cloud. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
5.5
EPSS
0.2%
EPSS 4% CVSS 8.8
HIGH POC PATCH Act Now

Nextcloud server is an open source home cloud implementation. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. This OS Command Injection vulnerability could allow attackers to execute arbitrary operating system commands on the host.

Command Injection Nextcloud Server Nextcloud
NVD GitHub
EPSS 0% CVSS 4.3
MEDIUM POC This Month

Authenticated information disclosure in Nextcloud Server 30.0.0 lets any user holding a valid account view previews of files owned by other users by manipulating the fileId parameter on the /core/preview endpoint, sidestepping sharing permissions and any prior sharing relationship with the victim. Exploitation requires authentication but no special privilege, and publicly available exploit code exists (a Gist and a Google Drive-hosted proof of concept are referenced by NVD); CISA KEV does not list this CVE, and EPSS is low at 0.27% (19th percentile), so it is a moderate-severity disclosure issue rather than a top-tier priority. Practical exposure is concentrated in multi-user and multi-tenant deployments where many accounts and many previewable files coexist; single-user instances are largely unaffected in practice.

Authentication Bypass Information Disclosure Nextcloud Server +1
NVD GitHub
EPSS 0% CVSS 4.3
MEDIUM PATCH This Month

A security vulnerability in Nextcloud Server and Enterprise Server (CVSS 4.3). Remediation should follow standard vulnerability management procedures. Vendor patch is available.

Information Disclosure Debian Nextcloud Server +1
NVD GitHub
EPSS 0% CVSS 4.3
MEDIUM PATCH This Month

Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server and Enterprise Server prior to 31.0.1, non-privileged users can modify tags on files they should not have access to via bulk tagging. This vulnerability is fixed in 31.0.1.

Authentication Bypass Debian Nextcloud Server +1
NVD GitHub
EPSS 0% CVSS 5.4
MEDIUM PATCH This Month

Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server and Server Enterprise prior to 31.0.12 and 32.0.3, a missing sanitization allowed malicious users to circumvent the content security policy when a malicious user manages to trick a user it viewing an uploaded SVG outside of the Nextcloud Servers web page.

XSS Debian Nextcloud Server +2
NVD GitHub
EPSS 0% CVSS 4.5
MEDIUM PATCH This Month

A security vulnerability in Nextcloud Server (CVSS 4.5) that allows an authenticated user. Remediation should follow standard vulnerability management procedures. Vendor patch is available.

Information Disclosure Debian Nextcloud Server +1
NVD GitHub
EPSS 0% CVSS 2.6
LOW Monitor

Nextcloud Server is a self hosted personal cloud system. Rated low severity (CVSS 2.6), this vulnerability is remotely exploitable. No vendor patch available.

Authentication Bypass Nextcloud Server Nextcloud
NVD GitHub
EPSS 0% CVSS 4.3
MEDIUM PATCH Monitor

Nextcloud Server is a self hosted personal cloud system, and the Nextcloud Groupfolders app provides admin-configured folders shared by everyone in a group or team. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. This Allocation of Resources Without Limits vulnerability could allow attackers to exhaust system resources through uncontrolled allocation.

Denial Of Service Nextcloud Server Nextcloud +1
NVD GitHub
EPSS 0% CVSS 4.3
MEDIUM PATCH This Month

Nextcloud Server is a self hosted personal cloud system. Rated medium severity (CVSS 4.3), this vulnerability is no authentication required, low attack complexity. This Server-Side Request Forgery (SSRF) vulnerability could allow attackers to make the server perform requests to unintended internal or external resources.

SSRF Nextcloud Server Nextcloud
NVD GitHub
EPSS 0% CVSS 6.4
MEDIUM This Month

Nextcloud Server is a self hosted personal cloud system. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable. No vendor patch available.

PHP Authentication Bypass Nextcloud Server +1
NVD GitHub
EPSS 0% CVSS 3.5
LOW PATCH Monitor

Nextcloud Server is a self hosted personal cloud system. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable, low attack complexity.

Authentication Bypass Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 4.3
MEDIUM PATCH This Month

Nextcloud Server is a self hosted personal cloud system. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
EPSS 0% CVSS 7.5
HIGH PATCH This Week

Nextcloud Server is a self hosted personal cloud system. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

PHP Information Disclosure Redis +2
NVD GitHub
EPSS 1% CVSS 6.5
MEDIUM PATCH This Month

Nextcloud Server is a self hosted personal cloud system. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
EPSS 0% CVSS 5.3
MEDIUM PATCH This Month

Nextcloud Server is a self hosted personal cloud system. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 6.5
MEDIUM PATCH This Month

Nextcloud Server is a self hosted personal cloud system. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Uncontrolled Resource Consumption vulnerability could allow attackers to cause denial of service by exhausting system resources.

Denial Of Service Nextcloud Server Nextcloud
NVD GitHub
EPSS 0% CVSS 8.2
HIGH PATCH This Week

Nextcloud Server is a self hosted personal cloud system. Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 5.4
MEDIUM This Month

Nextcloud Server is a self hosted personal cloud system. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 5.9
MEDIUM PATCH This Month

Nextcloud Server is a self hosted personal cloud system. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
EPSS 0% CVSS 4.3
MEDIUM PATCH This Month

Nextcloud Server is a self hosted personal cloud system. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. This Improper Privilege Management vulnerability could allow attackers to escalate privileges to gain unauthorized elevated access.

Privilege Escalation Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 6.5
MEDIUM PATCH This Month

Nextcloud Server is a self hosted personal cloud system. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
EPSS 0% CVSS 3.5
LOW PATCH Monitor

Nextcloud Server is a self hosted personal cloud system. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable, low attack complexity.

Authentication Bypass Nextcloud Server Nextcloud
NVD GitHub
EPSS 0% CVSS 5.4
MEDIUM PATCH This Month

Nextcloud Server is a self hosted personal cloud system. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity.

Authentication Bypass Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 8.1
HIGH PATCH This Week

Nextcloud Server is a self hosted personal cloud system. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity.

Authentication Bypass Nextcloud Server Nextcloud
NVD GitHub
EPSS 0% CVSS 4.3
MEDIUM PATCH This Month

Nextcloud Server is a self hosted personal cloud system. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity.

Authentication Bypass Nextcloud Server Nextcloud
NVD GitHub
EPSS 0% CVSS 3.5
LOW PATCH Monitor

Nextcloud Photos is a photo management app. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable, low attack complexity.

Authentication Bypass Nextcloud Server Nextcloud
NVD GitHub
EPSS 0% CVSS 7.5
HIGH PATCH This Week

Nextcloud server is a self hosted personal cloud system. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Improper Authentication vulnerability could allow attackers to bypass authentication mechanisms to gain unauthorized access.

Authentication Bypass Nextcloud Server Nextcloud
NVD GitHub
EPSS 0% CVSS 3.7
LOW PATCH Monitor

Nextcloud server is a self hosted personal cloud system. Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 9.8
CRITICAL PATCH Act Now

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 5.4
MEDIUM PATCH This Month

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity.

Authentication Bypass Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

SSRF Nextcloud Server Nextcloud
NVD GitHub
EPSS 0% CVSS 4.4
MEDIUM POC PATCH This Month

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity. Public exploit code available.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 4.3
MEDIUM POC PATCH This Month

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Authentication Bypass Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 2.7
LOW PATCH Monitor

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Rated low severity (CVSS 2.7), this vulnerability is remotely exploitable, low attack complexity.

Authentication Bypass Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 5.4
MEDIUM PATCH This Month

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 5.4
MEDIUM POC PATCH This Month

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

XSS Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 7.1
HIGH POC PATCH This Week

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Authentication Bypass Nextcloud Server Nextcloud
NVD GitHub
EPSS 0% CVSS 8.8
HIGH PATCH This Week

Nextcloud server is an open source home cloud platform. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 4.3
MEDIUM PATCH This Month

Nextcloud is an open source home cloud server. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Redis Nextcloud Server +1
NVD GitHub
EPSS 1% CVSS 7.5
HIGH PATCH This Week

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
EPSS 0% CVSS 7.8
HIGH PATCH This Week

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Authentication Bypass Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 7.7
HIGH PATCH This Week

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Rated high severity (CVSS 7.7), this vulnerability is remotely exploitable, low attack complexity.

Authentication Bypass Nextcloud Server Nextcloud
NVD GitHub
EPSS 0% CVSS 4.3
MEDIUM PATCH This Month

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Nextcloud Server Nextcloud
NVD GitHub
EPSS 0% CVSS 5.3
MEDIUM PATCH This Month

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 5.3
MEDIUM PATCH This Month

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 6.5
MEDIUM PATCH This Month

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Authentication Bypass Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 8.8
HIGH This Week

Nextcloud Server is a space for data storage on Nextcloud, a self-hosted productivity playform. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP Information Disclosure Nextcloud Server +1
NVD GitHub
EPSS 1% CVSS 8.1
HIGH This Week

NextCloud Server and NextCloud Enterprise Server provide file storage for Nextcloud, a self-hosted productivity platform. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP Authentication Bypass Nextcloud Server +1
NVD GitHub
EPSS 1% CVSS 9.1
CRITICAL Act Now

NextCloud Server and NextCloud Enterprise Server provide file storage for Nextcloud, a self-hosted productivity platform. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 6.1
MEDIUM POC PATCH This Month

NextCloud Server and NextCloud Enterprise Server provide file storage for Nextcloud, a self-hosted productivity platform. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Open Redirect Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 7.5
HIGH PATCH This Week

Nextcloud Server is a data storage system for Nextcloud, a self-hosted productivity platform. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 6.5
MEDIUM PATCH This Month

Nextcloud server is an open source personal cloud implementation. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
EPSS 0% CVSS 6.7
MEDIUM PATCH This Month

Nextcloud server provides a home for data. Rated medium severity (CVSS 6.7).

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 7.5
HIGH POC PATCH This Week

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 8.8
HIGH PATCH This Week

Nextcloud is a personal home server system. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

Authentication Bypass Nextcloud Server Nextcloud +1
NVD GitHub
EPSS 1% CVSS 4.3
MEDIUM POC PATCH This Month

Nextcloud Server is an open source personal cloud server. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 6.5
MEDIUM PATCH This Month

Nextcloud server is an open source home cloud implementation. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Authentication Bypass Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 7.5
HIGH PATCH This Week

Nextcloud server is an open source home cloud implementation. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 8.8
HIGH PATCH This Week

Nextcloud server is an open source home cloud implementation. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Path Traversal vulnerability could allow attackers to access files and directories outside the intended path.

Path Traversal Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 7.5
HIGH PATCH This Week

Nextcloud server is an open source home cloud implementation. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Uncontrolled Resource Consumption vulnerability could allow attackers to cause denial of service by exhausting system resources.

Denial Of Service Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 8.8
HIGH POC PATCH This Week

Nextcloud server is an open source home cloud implementation. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 8.1
HIGH PATCH This Week

Nextcloud server is an open source, personal cloud implementation. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity.

Privilege Escalation Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 7.1
HIGH PATCH This Week

Nextcloud server is an open source, personal cloud implementation. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
EPSS 0% CVSS 7.8
HIGH PATCH This Week

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform, and Nextcloud Enterprise Server is the enterprise version of the file server software. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 7.5
HIGH POC PATCH This Week

Nextcloud is an Open Source private cloud software. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Authentication Bypass Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 6.5
MEDIUM POC PATCH This Month

Nextcloud is an Open Source private cloud software. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Denial Of Service Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 7.5
HIGH PATCH This Week

Nextcloud server is a self hosted home cloud product. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Path Traversal vulnerability could allow attackers to access files and directories outside the intended path.

Path Traversal Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 5.3
MEDIUM POC This Month

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

SSRF Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 5.3
MEDIUM PATCH This Month

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Nextcloud Server Nextcloud
NVD GitHub
EPSS 0% CVSS 5.3
MEDIUM This Month

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform, and Nextcloud Office is a document collaboration app for the same platform. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Microsoft Nextcloud Server +2
NVD GitHub
EPSS 1% CVSS 5.3
MEDIUM PATCH This Month

Nextcloud Server is an open source personal cloud server. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 2.7
LOW PATCH Monitor

Nextcloud Server is an open source personal cloud server. Rated low severity (CVSS 2.7), this vulnerability is remotely exploitable, low attack complexity. This Uncontrolled Resource Consumption vulnerability could allow attackers to cause denial of service by exhausting system resources.

Denial Of Service Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 5.3
MEDIUM PATCH This Month

Nextcloud Server is an open source personal cloud server. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Uncontrolled Resource Consumption vulnerability could allow attackers to cause denial of service by exhausting system resources.

Denial Of Service Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 6.5
MEDIUM PATCH This Month

Nextcloud server is an open source personal cloud server. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Denial Of Service Fedora Nextcloud Server +3
NVD GitHub
EPSS 0% CVSS 6.5
MEDIUM POC PATCH This Month

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Information Disclosure Microsoft Nextcloud Server +2
NVD GitHub
EPSS 1% CVSS 4.3
MEDIUM PATCH This Month

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. This Uncontrolled Resource Consumption vulnerability could allow attackers to cause denial of service by exhausting system resources.

Denial Of Service Nextcloud Server Nextcloud +1
NVD GitHub
EPSS 1% CVSS 5.3
MEDIUM PATCH This Month

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Nextcloud Server Nextcloud +1
NVD GitHub
EPSS 1% CVSS 5.3
MEDIUM PATCH This Month

Nextcloud server is an open source personal cloud platform. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Server-Side Request Forgery (SSRF) vulnerability could allow attackers to make the server perform requests to unintended internal or external resources.

SSRF Nextcloud Server Nextcloud +1
NVD GitHub
EPSS 1% CVSS 7.5
HIGH PATCH This Week

Nextcloud server is an open source personal cloud product. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Nextcloud Server Nextcloud +1
NVD GitHub
EPSS 1% CVSS 2.7
LOW PATCH Monitor

Nextcloud server is an open source personal cloud solution. Rated low severity (CVSS 2.7), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 5.3
MEDIUM PATCH This Month

Nextcloud server is an open source personal cloud solution. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Allocation of Resources Without Limits vulnerability could allow attackers to exhaust system resources through uncontrolled allocation.

PHP Denial Of Service Nextcloud Server +1
NVD GitHub
EPSS 2% CVSS 3.5
LOW POC PATCH Monitor

Nextcloud server is an open source personal cloud server. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Command Injection Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 4.3
MEDIUM PATCH This Month

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 4.3
MEDIUM PATCH This Month

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 4.3
MEDIUM POC This Month

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 4.3
MEDIUM PATCH This Month

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity.

Code Injection Nextcloud Server Nextcloud
NVD GitHub
EPSS 2% CVSS 6.5
MEDIUM POC PATCH This Month

Nextcloud server is an open source, self hosted cloud style services platform. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Denial Of Service Nextcloud Server Nextcloud
NVD GitHub
EPSS 2% CVSS 8.1
HIGH PATCH This Week

Nextcloud is an open-source, self-hosted productivity platform. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity.

PHP Information Disclosure Nextcloud Server +1
NVD GitHub
EPSS 3% CVSS 9.8
CRITICAL Act Now

Nextcloud server is an open source, self hosted personal cloud. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP Information Disclosure Nextcloud Server +1
NVD GitHub
EPSS 0% CVSS 5.5
MEDIUM This Month

Nextcloud server is an open source, self hosted personal cloud. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
Page 1 of 2 Next

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy