ownCloud

Records173All Threatist records

Exploited (KEV)2In CISA KEV

CVSS critical12CVSS 9.0–10.0

CVSS high24CVSS 7.0–8.9

Exploited now

ownCloud records in CISA KEV

TI-2023-26770 ownCloud Improper Authentication Vulnerability CRITICAL 100KEV 2026-08-27 TI-2023-26768 ownCloud graphapi Information Disclosure Vulnerability CRITICAL 100KEV 2023-11-30

Components

Products in the NVD configurations · select one to filter the records

Owncloud 116 records MEDIUM Owncloud Server 108 records CRITICAL Owncloud Client 7 records MEDIUM Owncloud Desktop Client 5 records LOW Files Antivirus 3 records MEDIUM File Firewall 1 record LOW Graph Api 1 record CRITICAL Guests 1 record MEDIUM

Records

1 record in Guests · all components

TI-2025-37176 CVE-2025-59716 · GHSA-967j-jc6x-3jm4

ownCloud Guests before 0.12.5 allows unauthenticated user enumeration via the…

MEDIUM 63

ownCloud Guests before 0.12.5 allows unauthenticated user enumeration via the /apps/guests/register/{email}/{token} endpoint.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00951 Published 2025-11-05 No fix listed CWE-200

Open these records in search →