← back
CVE-2017-0895CWE-285

CVE-2017-0895

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.7%
exploitation probability
0.7%top 49% of all CVEs
observed exploitation
nono source reports it
Nextcloud Server before 10.0.4 and 11.0.2 are vulnerable to disclosure of calendar and addressbook names to other logged-in users. Note that no actual content of the calendar and addressbook has been disclosed.