ownCloud

Records173All Threatist records

Exploited (KEV)2In CISA KEV

CVSS critical12CVSS 9.0–10.0

CVSS high24CVSS 7.0–8.9

Exploited now

ownCloud records in CISA KEV

TI-2023-26770 ownCloud Improper Authentication Vulnerability CRITICAL 100KEV 2026-08-27 TI-2023-26768 ownCloud graphapi Information Disclosure Vulnerability CRITICAL 100KEV 2023-11-30

Components

Products in the NVD configurations · select one to filter the records

Owncloud 116 records MEDIUM Owncloud Server 108 records CRITICAL Owncloud Client 7 records MEDIUM Owncloud Desktop Client 5 records LOW Files Antivirus 3 records MEDIUM File Firewall 1 record LOW Graph Api 1 record CRITICAL Guests 1 record MEDIUM

Records

7 records in Owncloud Client · all components

TI-2023-09745 CVE-2023-23948

ownCloud Android app vulnerable to SQL Injection

MEDIUM 61

The ownCloud Android app allows ownCloud users to access, share, and edit files and folders.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00464 Published 2023-02-13 No fix listed CWE-89

TI-2023-10305 CVE-2023-24804

ownCloud Android app vulnerable to Path Traversal

MEDIUM 56

The ownCloud Android app allows ownCloud users to access, share, and edit files and folders.

CVSS 3.1MEDIUM 5.0 Local No auth User interaction EPSS 0.00524 Published 2023-02-13 Fixed in 3.0 CWE-22

TI-2022-09030 CVE-2022-25338 · GHSA-43rm-m793-9q62

ownCloud owncloud/android before 2.20 has Incorrect Access Control for physically proximate attackers.

LOW 30

ownCloud owncloud/android before 2.20 has Incorrect Access Control for physically proximate attackers.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00245 Published 2022-04-07 No fix listed

TI-2020-18570 CVE-2020-36250 · GHSA-8ph5-68pq-3fm9

In the ownCloud application before 2.15 for Android, the lock protection mechanism can be…

LOW 27

In the ownCloud application before 2.15 for Android, the lock protection mechanism can be bypassed by moving the system date/time into the past.

CVSS 3.1MEDIUM 6.1 Physical No auth No interaction EPSS 0.00269 Published 2021-02-19 No fix listed

TI-2015-05045 CVE-2015-5955 · GHSA-6hf2-2p4r-38v2

ownCloud iOS app before 3.4.4 does not properly switch state between multiple instances…

LOW 25

ownCloud iOS app before 3.4.4 does not properly switch state between multiple instances, which might allow remote instance administrators to obtain sensitive credential and cookie information by reading authentication he…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01093 Published 2015-10-29 No fix listed CWE-522

TI-2022-09031 CVE-2022-25339 · GHSA-c2r8-h7hq-477v

ownCloud owncloud/android 2.20 has Incorrect Access Control for local attackers.

LOW 24

ownCloud owncloud/android 2.20 has Incorrect Access Control for local attackers.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00221 Published 2022-04-07 No fix listed

TI-2020-18568 CVE-2020-36248 · GHSA-v933-rrv9-44p3

The ownCloud application before 2.15 for Android allows attackers to use adb to include a…

LOW 20

The ownCloud application before 2.15 for Android allows attackers to use adb to include a PIN preferences value in a backup archive, and consequently bypass the PIN lock feature by restoring from this archive.

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00144 Published 2021-02-19 No fix listed CWE-312

Open these records in search →

Critical	12
High	24
Medium	120
Low	17
No CVSS	0