Read the docs

Collaboraoffice

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

Collaboraoffice records in CISA KEV

No Collaboraoffice vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Collabora Online 3 records MEDIUM Richdocumentscode 2 records LOW Collabora Online Development Edition 1 record LOW Online 1 record LOW

Records

1 record in Collabora Online Development Edition · all components

TI-2020-09949 CVE-2020-12432 · GHSA-w9v6-fcfc-9xr5

The WOPI API integration for Vereign Collabora CODE through 4.2.2 does not properly…

Priority LOW 29

The WOPI API integration for Vereign Collabora CODE through 4.2.2 does not properly restrict delivery of JavaScript to a victim's browser, and lacks proper MIME type access control, which could lead to XSS that steals ac…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00866 Published 2020-07-21 No fix listed CWE-79
Open these records in search →