Nextcloud Vulnerabilidad

Cronología

Escribe

Producto

Nextcloud Server85
Nextcloud Enterprise Server26
Nextcloud Talk17
Nextcloud Desktop Client17
Nextcloud App16

Contramedidas

Official Fix193
Temporary Fix0
Workaround0
Unavailable0
Not Defined17

Explotabilidad

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined210

Vector de acceso

Not Defined0
Physical14
Local20
Adjacent10
Network166

Autenticación

Not Defined0
High25
Low138
None47

La interacción del usuario

Not Defined0
Required95
None115

C3BM Index

CVSSv3 Base

≤10
≤20
≤313
≤446
≤561
≤650
≤724
≤812
≤93
≤101

CVSSv3 Temp

≤10
≤20
≤318
≤442
≤562
≤651
≤727
≤86
≤93
≤101

VulDB

≤10
≤24
≤324
≤474
≤539
≤638
≤719
≤811
≤90
≤101

NVD

≤10
≤20
≤36
≤46
≤526
≤628
≤726
≤818
≤99
≤108

CNA

≤10
≤22
≤317
≤431
≤527
≤622
≤712
≤85
≤910
≤102

Proveedor

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Explotar día 0

<1k66
<2k113
<5k31
<10k0
<25k0
<50k0
<100k0
≥100k0

Explotar hoy

<1k210
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Explotar el volumen del mercado

🔴 CTI Ocupaciones

Affected Products (42): Android (1), App (16), App Extract (1), Calendar (4), Calendar App (1), Circle (1), Circles (1), Client (2), Collabra (1), Contacts (5), Cookbook (1), Deck (13), Desktop (4), Desktop Client (17), Dialogs Library (1), End-to-End Encryption (1), End-to-end Encryption App (1), Enterprise Server (28), Files (1), Files Access Control (1), Files Automated Tagging App (1), Files ZIP (1), Global Site Selector (1), Guests (2), Lookup-Server (1), Mail (11), Mail Application (1), NextcloudPi (1), Office (1), OfficeOnline (1), Office Richdocuments (1), Password Policy (1), Preferred Providers App (1), Richdocuments (4), Server (88), Social (1), Social App (1), Talk (17), Talk-Android (1), Text (2), User Saml (1), news-android (1)

Fecha de publicaciónBaseTempVulnerabilidadProdExpConEPSSCTICVE
2024-03-299.99.7Nextcloud NextcloudPi Web-Panel escalada de privilegiosCloud SoftwareNot DefinedOfficial Fix0.000430.04CVE-2024-30247
2024-01-184.24.2NextCloud Files ZIP ZIP Archive escalada de privilegiosCloud SoftwareNot DefinedOfficial Fix0.000530.02CVE-2024-22404
2024-01-185.95.7NextCloud Guests Request URL Privilege EscalationCloud SoftwareNot DefinedOfficial Fix0.000530.05CVE-2024-22402
2024-01-184.24.2NextCloud Guests Allowed Apps List escalada de privilegiosCloud SoftwareNot DefinedOfficial Fix0.000530.04CVE-2024-22401
2024-01-183.93.9NextCloud Deck Organization cross site scriptingCloud SoftwareNot DefinedOfficial Fix0.000510.00CVE-2024-22213
2024-01-184.14.1NextCloud User Saml Link RedirectCloud SoftwareNot DefinedOfficial Fix0.000520.00CVE-2024-22400
2024-01-188.68.5NextCloud Global Site Selector autenticación débilCloud SoftwareNot DefinedOfficial Fix0.000970.05CVE-2024-22212
2024-01-183.13.1NextCloud Server OAuth2 divulgación de informaciónCloud SoftwareNot DefinedOfficial Fix0.000510.00CVE-2024-22403
2023-12-224.34.2Nextcloud Files autenticación débiliOS App SoftwareNot DefinedOfficial Fix0.000460.02CVE-2023-49790
2023-12-226.46.2Nextcloud Server/Enterprise Server autenticación débilCloud SoftwareNot DefinedOfficial Fix0.000530.02CVE-2023-49791
2023-12-226.36.2Nextcloud Server/Enterprise Server divulgación de informaciónCloud SoftwareNot DefinedOfficial Fix0.000680.03CVE-2023-49792
2023-12-224.24.2Nextcloud Calendar divulgación de informaciónCalendar SoftwareNot DefinedOfficial Fix0.000490.00CVE-2023-48308
2023-11-225.65.6Nextcloud Mail escalada de privilegiosCloud SoftwareNot DefinedOfficial Fix0.000680.04CVE-2023-48307
2023-11-224.14.1Nextcloud Server/Enterprise Server HTML Code cross site scriptingCloud SoftwareNot DefinedOfficial Fix0.000530.00CVE-2023-48302
2023-11-223.13.0Nextcloud Server/Enterprise Server user_ldap App cifrado débilCloud SoftwareNot DefinedOfficial Fix0.000450.00CVE-2023-48305
2023-11-227.37.2Nextcloud Server/Enterprise Server External Storage escalada de privilegiosCloud SoftwareNot DefinedOfficial Fix0.000520.02CVE-2023-48239
2023-11-224.14.1Nextcloud Server/Enterprise Server Search UI cross site scriptingCloud SoftwareNot DefinedOfficial Fix0.000510.00CVE-2023-48301
2023-11-224.34.2Nextcloud Server/Enterprise Server Birthday Calendar escalada de privilegiosCloud SoftwareNot DefinedOfficial Fix0.000510.03CVE-2023-48304
2023-11-222.52.5Nextcloud Server/Enterprise Server External Storage escalada de privilegiosCloud SoftwareNot DefinedOfficial Fix0.000530.00CVE-2023-48303
2023-11-226.46.3Nextcloud Server/Enterprise Server DNS Pin Middleware escalada de privilegiosCloud SoftwareNot DefinedOfficial Fix0.000680.03CVE-2023-48306
2023-10-164.34.2Nextcloud Calendar Email Address denegación de servicioCalendar SoftwareNot DefinedOfficial Fix0.000510.00CVE-2023-45150
2023-10-164.34.2Nextcloud Mail Proxy Endpoint escalada de privilegiosCloud SoftwareNot DefinedOfficial Fix0.000530.02CVE-2023-45660
2023-10-163.73.6Nextcloud Talk divulgación de informaciónCloud SoftwareNot DefinedOfficial Fix0.000530.00CVE-2023-45149
2023-10-166.06.0Nextcloud Server cifrado débilCloud SoftwareNot DefinedOfficial Fix0.000600.03CVE-2023-45151
2023-10-135.25.2Nextcloud Server/Enterprise Server WebDAV API divulgación de informaciónCloud SoftwareNot DefinedOfficial Fix0.000640.04CVE-2023-39960

185 no se muestran más entradas

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!