Vulnerabilities in ownCloud
10 resultsVexday analysis
O ownCloud apresenta um portfólio reduzido de 4 vulnerabilidades conhecidas, nenhuma em exploração ativa ou com severidade crítica, o que indica risco controlado no curto prazo. A fraqueza dominante é CWE-22 (path traversal), padrão em aplicações web, sem evidência de atividade de ataque recente na base KEV. O panorama sugere exposição baixa a moderada, recomendando-se manutenção preventiva de patches já disponibilizados.
CVE-2013-0202—Cross-site scripting (XSS) vulnerability in ownCloud 4.5.5, 4.0.10, and earlier allows remote attackers to inject arbitrary web script or HTEPSS 0.9%CVE-2013-0203—Multiple cross-site scripting (XSS) vulnerabilities in ownCloud 4.5.5, 4.0.10, and earlier allow remote attackers to inject arbitrary web scEPSS 0.7%CVE-2025-53827CRITICALownCloud Core: Updater has an exposed dangerous method or functionEPSS 0.6%CVE-2023-24804MEDIUMownCloud Android app vulnerable to Path TraversalEPSS 0.5%CVE-2025-53829HIGHownCloud 10 is vulnerable to Relative Path TraversalEPSS 0.5%CVE-2023-23948MEDIUMownCloud Android app vulnerable to SQL InjectionEPSS 0.5%CVE-2025-53830CRITICALAnti-Virus for ownCloud 10 is vulnerable to Server-Side Request Forgery (SSRF)EPSS 0.5%CVE-2019-25337MEDIUMOwnCloud 8.1.8 - Username DisclosureEPSS 0.4%CVE-2025-53828HIGHSharePoint for ownCloud 10 is vulnerable to Server-Side Request Forgery (SSRF)EPSS 0.4%CVE-2025-53831HIGHDrawIO for ownCloud 10 is vulnerable to Stored XSSEPSS 0.3%