Seafile

Records12All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high6CVSS 7.0–8.9

Exploited now

Seafile records in CISA KEV

No Seafile vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Seafile 6 records LOW Seafile Server 4 records LOW Seadroid 1 record LOW Seafile-client 1 record LOW

Records

4 records in Seafile Server · all components

TI-2026-23578 CVE-2026-30587 · GHSA-rqj3-x344-qvxc

Multiple Stored XSS vulnerabilities exist in Seafile Server version…

LOW 37

Multiple Stored XSS vulnerabilities exist in Seafile Server version 13.0.15,13.0.16-pro,12.0.14 and prior and fixed in 13.0.17, 13.0.17-pro, and 12.0.20-pro, via the Seadoc (sdoc) editor.

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.00288 Published 2026-03-25 Fixed in 3.0.75, 2.0.209 CWE-79

TI-2021-19626 CVE-2021-43820

Permissions check bypass in Seafile

LOW 34

Seafile is an open source cloud storage system.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00994 Published 2021-12-14 No fix listed CWE-639

TI-2014-04441 CVE-2014-5443 · GHSA-j86j-6mp8-v73v

Seafile Server before 3.1.2 and Server Professional Edition before 3.1.0 allow local…

LOW 34

Seafile Server before 3.1.2 and Server Professional Edition before 3.1.0 allow local users to gain privileges via vectors related to ccnet handling user accounts.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00416 Published 2018-03-19 No fix listed CWE-264

TI-2025-40382 CVE-2025-65516 · GHSA-86jv-vvjm-w37g

A stored cross-site scripting (XSS) vulnerability was discovered in Seafile Community…

LOW 27

A stored cross-site scripting (XSS) vulnerability was discovered in Seafile Community Edition prior to version 13.0.12.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00239 Published 2025-12-04 No fix listed CWE-79

Open these records in search →

Critical	0
High	6
Medium	6
Low	0
No CVSS	0