Логотип exploitDog
product: "nextcloud_server"
Консоль
Логотип exploitDog

exploitDog

product: "nextcloud_server"
Nextcloud Server

Nextcloud Serverнабор клиент-серверных программ для создания и использования хранилища данных.

Релизный цикл, информация об уязвимостях

Продукт: Nextcloud Server
Вендор: nextcloud

График релизов

3132202520262027

Недавние уязвимости Nextcloud Server

Количество 440

nvd логотип

CVE-2022-39330

больше 3 лет назад

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server prior to versions 23.0.10 and 24.0.6 and Nextcloud Enterprise Server prior to versions 22.2.10, 23.0.10, and 24.0.6 are vulnerable to a logged-in attacker slowing down the system by generating a lot of database/cpu load. Nextcloud Server versions 23.0.10 and 24.0.6 and Nextcloud Enterprise Server versions 22.2.10, 23.0.10, and 24.0.6 contain patches for this issue. As a workaround, disable the Circles app.

CVSS3: 4.8
EPSS: Низкий
debian логотип

CVE-2022-39330

больше 3 лет назад

Nextcloud Server is the file server software for Nextcloud, a self-hos ...

CVSS3: 4.8
EPSS: Низкий
nvd логотип

CVE-2022-39329

больше 3 лет назад

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server and Nextcloud Enterprise Server prior to versions 23.0.9 and 24.0.5 are vulnerable to exposure of information that cannot be controlled by administrators without direct database access. Versions 23.0.9 and 24.0.5 contains patches for this issue. No known workarounds are available.

CVSS3: 3.5
EPSS: Низкий
debian логотип

CVE-2022-39329

больше 3 лет назад

Nextcloud Server is the file server software for Nextcloud, a self-hos ...

CVSS3: 3.5
EPSS: Низкий
nvd логотип

CVE-2022-39211

больше 3 лет назад

Nextcloud server is an open source personal cloud platform. In affected versions it was found that locally running webservices can be found and requested erroneously. It is recommended that the Nextcloud Server is upgraded to 23.0.8 or 24.0.4. It is recommended that the Nextcloud Enterprise Server is upgraded to 22.2.10.4, 23.0.8 or 24.0.4. There are no known workarounds for this issue.

CVSS3: 3
EPSS: Низкий
debian логотип

CVE-2022-39211

больше 3 лет назад

Nextcloud server is an open source personal cloud platform. In affecte ...

CVSS3: 3
EPSS: Низкий
nvd логотип

CVE-2022-36074

больше 3 лет назад

Nextcloud server is an open source personal cloud product. Affected versions of this package are vulnerable to Information Exposure which fails to strip the Authorization header on HTTP downgrade. This can lead to account access exposure and compromise. It is recommended that the Nextcloud Server is upgraded to 23.0.7 or 24.0.3. It is recommended that the Nextcloud Enterprise Server is upgraded to 22.2.11, 23.0.7 or 24.0.3. There are no known workarounds for this issue.

CVSS3: 6.4
EPSS: Низкий
debian логотип

CVE-2022-36074

больше 3 лет назад

Nextcloud server is an open source personal cloud product. Affected ve ...

CVSS3: 6.4
EPSS: Низкий
nvd логотип

CVE-2022-31120

больше 3 лет назад

Nextcloud server is an open source personal cloud solution. The audit log is used to get a full trail of the actions which has been incompletely populated. In affected versions federated share events were not properly logged which would allow brute force attacks to go unnoticed. This behavior exacerbates the impact of CVE-2022-31118. It is recommended that the Nextcloud Server is upgraded to 22.2.7, 23.0.4 or 24.0.0. There are no workarounds available.

CVSS3: 2.1
EPSS: Низкий
debian логотип

CVE-2022-31120

больше 3 лет назад

Nextcloud server is an open source personal cloud solution. The audit ...

CVSS3: 2.1
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
1
nvd логотип
CVE-2022-39330

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server prior to versions 23.0.10 and 24.0.6 and Nextcloud Enterprise Server prior to versions 22.2.10, 23.0.10, and 24.0.6 are vulnerable to a logged-in attacker slowing down the system by generating a lot of database/cpu load. Nextcloud Server versions 23.0.10 and 24.0.6 and Nextcloud Enterprise Server versions 22.2.10, 23.0.10, and 24.0.6 contain patches for this issue. As a workaround, disable the Circles app.

CVSS3: 4.8
0%
Низкий
больше 3 лет назад
debian логотип
CVE-2022-39330

Nextcloud Server is the file server software for Nextcloud, a self-hos ...

CVSS3: 4.8
0%
Низкий
больше 3 лет назад
nvd логотип
CVE-2022-39329

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server and Nextcloud Enterprise Server prior to versions 23.0.9 and 24.0.5 are vulnerable to exposure of information that cannot be controlled by administrators without direct database access. Versions 23.0.9 and 24.0.5 contains patches for this issue. No known workarounds are available.

CVSS3: 3.5
0%
Низкий
больше 3 лет назад
debian логотип
CVE-2022-39329

Nextcloud Server is the file server software for Nextcloud, a self-hos ...

CVSS3: 3.5
0%
Низкий
больше 3 лет назад
nvd логотип
CVE-2022-39211

Nextcloud server is an open source personal cloud platform. In affected versions it was found that locally running webservices can be found and requested erroneously. It is recommended that the Nextcloud Server is upgraded to 23.0.8 or 24.0.4. It is recommended that the Nextcloud Enterprise Server is upgraded to 22.2.10.4, 23.0.8 or 24.0.4. There are no known workarounds for this issue.

CVSS3: 3
0%
Низкий
больше 3 лет назад
debian логотип
CVE-2022-39211

Nextcloud server is an open source personal cloud platform. In affecte ...

CVSS3: 3
0%
Низкий
больше 3 лет назад
nvd логотип
CVE-2022-36074

Nextcloud server is an open source personal cloud product. Affected versions of this package are vulnerable to Information Exposure which fails to strip the Authorization header on HTTP downgrade. This can lead to account access exposure and compromise. It is recommended that the Nextcloud Server is upgraded to 23.0.7 or 24.0.3. It is recommended that the Nextcloud Enterprise Server is upgraded to 22.2.11, 23.0.7 or 24.0.3. There are no known workarounds for this issue.

CVSS3: 6.4
0%
Низкий
больше 3 лет назад
debian логотип
CVE-2022-36074

Nextcloud server is an open source personal cloud product. Affected ve ...

CVSS3: 6.4
0%
Низкий
больше 3 лет назад
nvd логотип
CVE-2022-31120

Nextcloud server is an open source personal cloud solution. The audit log is used to get a full trail of the actions which has been incompletely populated. In affected versions federated share events were not properly logged which would allow brute force attacks to go unnoticed. This behavior exacerbates the impact of CVE-2022-31118. It is recommended that the Nextcloud Server is upgraded to 22.2.7, 23.0.4 or 24.0.0. There are no workarounds available.

CVSS3: 2.1
1%
Низкий
больше 3 лет назад
debian логотип
CVE-2022-31120

Nextcloud server is an open source personal cloud solution. The audit ...

CVSS3: 2.1
1%
Низкий
больше 3 лет назад

Уязвимостей на страницу


Поделиться