Records38All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical17CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9
Exploited now
ONLYOFFICE records in CISA KEVComponents
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 47
The Translate plugin 6.1.x through 6.3.x before 6.3.0.72 for ONLYOFFICE Document Server lacks escape calls for the msg.data and text fields.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02317 · Published 2021-09-10 · No fix listed
