ONLYOFFICE

Records38All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical17CVSS 9.0–10.0

CVSS high7CVSS 7.0–8.9

Exploited now

ONLYOFFICE records in CISA KEV

TI-2021-02273 ONLYOFFICE Docs Server Path Traversal Vulnerability CRITICAL 100KEV 2026-10-08

Components

Products in the NVD configurations · select one to filter the records

Document Server 21 records CRITICAL Server 6 records HIGH Core 2 records MEDIUM Onlyoffice 2 records HIGH Google Translate 1 record MEDIUM Workspace 1 record MEDIUM

Records

1 record in Workspace · all components

TI-2022-23489 CVE-2022-47412 · GHSA-2chf-w4v5-vmmg

ONLYOFFICE Workspace Search Stored XSS

MEDIUM 58

Given a malicious document provided by an attacker, the ONLYOFFICE Workspace DMS is vulnerable to a stored (persistent, or "Type II") cross-site scripting (XSS) condition.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00582 Published 2023-02-07 No fix listed CWE-79

Open these records in search →

Critical	17
High	7
Medium	14
Low	0
No CVSS	0