Owncloud

104 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2012-4753 MEDIUM This Month

Multiple cross-site request forgery (CSRF) vulnerabilities in ownCloud before 4.0.5 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. No vendor patch available.

CSRF Owncloud Owncloud Server

NVD

CVSS 2.0

6.8

EPSS

0.1%

CVE-2012-4752 MEDIUM This Month

appconfig.php in ownCloud before 4.0.6 does not properly restrict access, which allows remote authenticated users to edit app configurations via unspecified vectors. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP Privilege Escalation Owncloud Owncloud Server

NVD GitHub

CVSS 2.0

5.0

EPSS

0.6%

CVE-2012-4397 MEDIUM POC PATCH This Month

Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.1 allow remote attackers to inject arbitrary web script or HTML via the (1) calendar displayname to. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available.

PHP XSS Owncloud Owncloud Server

NVD GitHub

CVSS 2.0

4.3

EPSS

0.3%

CVE-2012-4396 MEDIUM POC PATCH This Month

Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) file names to apps/user_ldap/settings.php; (2). Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available.

PHP XSS Owncloud Owncloud Server

NVD GitHub

CVSS 2.0

4.3

EPSS

0.8%

CVE-2012-4395 MEDIUM POC PATCH This Month

Cross-site scripting (XSS) vulnerability in index.php in ownCloud before 4.0.3 allows remote attackers to inject arbitrary web script or HTML via the redirect_url parameter. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available.

PHP XSS Owncloud Owncloud Server

NVD GitHub

CVSS 2.0

4.3

EPSS

0.3%

CVE-2012-4394 MEDIUM POC PATCH This Month

Cross-site scripting (XSS) vulnerability in apps/files/js/filelist.js in ownCloud before 4.0.5 allows remote attackers to inject arbitrary web script or HTML via the file parameter. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available.

XSS Owncloud Owncloud Server

NVD GitHub

CVSS 2.0

4.3

EPSS

0.3%

CVE-2012-4393 MEDIUM POC PATCH This Month

Multiple cross-site request forgery (CSRF) vulnerabilities in ownCloud before 4.0.6 allow remote attackers to hijack the authentication of arbitrary users for requests that use (1) addBookmark.php,. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. Public exploit code available.

CSRF PHP Owncloud Owncloud Server

NVD GitHub

CVSS 2.0

6.8

EPSS

0.2%

CVE-2012-4391 MEDIUM This Month

Cross-site request forgery (CSRF) vulnerability in core/ajax/appconfig.php in ownCloud before 4.0.7 allows remote attackers to hijack the authentication of administrators for requests that edit the. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. No vendor patch available.

CSRF PHP Owncloud Owncloud Server

NVD GitHub

CVSS 2.0

6.8

EPSS

0.1%

CVE-2012-4390 MEDIUM POC PATCH This Month

(1) apps/calendar/appinfo/remote.php and (2) apps/contacts/appinfo/remote.php in ownCloud before 4.0.7 allows remote authenticated users to enumerate the registered users via unspecified vectors. Rated medium severity (CVSS 4.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

PHP Information Disclosure Owncloud Owncloud Server

NVD GitHub

CVSS 2.0

4.0

EPSS

0.2%

CVE-2012-4389 MEDIUM POC PATCH This Month

Incomplete blacklist vulnerability in lib/migrate.php in ownCloud before 4.0.7 allows remote attackers to execute arbitrary code by uploading a crafted .htaccess file in an import.zip file and. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. Public exploit code available.

PHP RCE Owncloud Owncloud Server

NVD GitHub

CVSS 2.0

6.8

EPSS

1.7%

CVE-2012-2398 MEDIUM This Month

Cross-site scripting (XSS) vulnerability in files/ajax/download.php in ownCloud before 3.0.3 allows remote attackers to inject arbitrary web script or HTML via the files parameter, a different. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

PHP XSS Owncloud Owncloud Server

NVD

CVSS 2.0

4.3

EPSS

0.3%

CVE-2012-2397 MEDIUM This Month

Cross-site request forgery (CSRF) vulnerability in ownCloud before 3.0.3 allows remote attackers to hijack the authentication of arbitrary users for requests that insert cross-site scripting (XSS). Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. No vendor patch available.

CSRF XSS Owncloud Owncloud Server

NVD

CVSS 2.0

6.8

EPSS

0.2%

CVE-2012-2270 MEDIUM POC THREAT This Month

Open redirect vulnerability in index.php (aka the Login Page) in ownCloud before 3.0.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the. Rated medium severity (CVSS 5.8), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 15.8%.

PHP Open Redirect Owncloud Owncloud Server

NVD Exploit-DB

CVSS 2.0

5.8

EPSS

15.8%

CVE-2012-2269 MEDIUM POC This Month

Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 3.0.3 allow remote attackers to inject arbitrary web script or HTML via (1) an arbitrary field to. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

PHP XSS Owncloud Owncloud Server

NVD

CVSS 2.0

4.3

EPSS

0.9%

CVE-2012-4753

EPSS 0% CVSS 6.8

MEDIUM This Month

CSRF Owncloud Owncloud Server

NVD

CVE-2012-4752

EPSS 1% CVSS 5.0

MEDIUM This Month

PHP Privilege Escalation Owncloud +1

NVD GitHub

CVE-2012-4397

EPSS 0% CVSS 4.3

MEDIUM POC PATCH This Month

PHP XSS Owncloud +1

NVD GitHub

CVE-2012-4396

EPSS 1% CVSS 4.3

MEDIUM POC PATCH This Month

PHP XSS Owncloud +1

NVD GitHub

CVE-2012-4395

EPSS 0% CVSS 4.3

MEDIUM POC PATCH This Month

PHP XSS Owncloud +1

NVD GitHub

CVE-2012-4394

EPSS 0% CVSS 4.3

MEDIUM POC PATCH This Month

XSS Owncloud Owncloud Server

NVD GitHub

CVE-2012-4393

EPSS 0% CVSS 6.8

MEDIUM POC PATCH This Month

CSRF PHP Owncloud +1

NVD GitHub

CVE-2012-4391

EPSS 0% CVSS 6.8

MEDIUM This Month

CSRF PHP Owncloud +1

NVD GitHub

CVE-2012-4390

EPSS 0% CVSS 4.0

MEDIUM POC PATCH This Month

PHP Information Disclosure Owncloud +1

NVD GitHub

CVE-2012-4389

EPSS 2% CVSS 6.8

MEDIUM POC PATCH This Month

PHP RCE Owncloud +1

NVD GitHub

CVE-2012-2398

EPSS 0% CVSS 4.3

MEDIUM This Month

PHP XSS Owncloud +1

NVD

CVE-2012-2397

EPSS 0% CVSS 6.8

MEDIUM This Month

CSRF XSS Owncloud +1

NVD

CVE-2012-2270

EPSS 16% CVSS 5.8

MEDIUM POC THREAT This Month

PHP Open Redirect Owncloud +1

NVD Exploit-DB

CVE-2012-2269

EPSS 1% CVSS 4.3

MEDIUM POC This Month

PHP XSS Owncloud +1

NVD

Prev Page 2 of 2