Owncloud Vulnerabilidad

Cronología

Escribe

Cloud Software	15
Android App Software	4

Producto

ownCloud Server	7
ownCloud App	4
ownCloud Desktop Client	2
ownCloud core	1
ownCloud oauth2	1

Contramedidas

Official Fix	18
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	1

Explotabilidad

High	0
Functional	0
Proof-of-Concept	0
Unproven	0
Not Defined	19

Vector de acceso

Not Defined	0
Physical	2
Local	3
Adjacent	2
Network	12

Autenticación

Not Defined	0
High	0
Low	11
None	8

La interacción del usuario

Not Defined	0
Required	3
None	16

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	1
≤5	4
≤6	8
≤7	4
≤8	1
≤9	1
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	1
≤5	4
≤6	12
≤7	0
≤8	1
≤9	1
≤10	0

VulDB

≤1	0
≤2	1
≤3	0
≤4	2
≤5	3
≤6	8
≤7	4
≤8	1
≤9	0
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	3
≤6	2
≤7	1
≤8	1
≤9	0
≤10	0

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	1
≤6	0
≤7	1
≤8	0
≤9	1
≤10	2

Proveedor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Explotar día 0

<1k	5
<2k	10
<5k	4
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Explotar hoy

<1k	19
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Explotar el volumen del mercado

🔴 CTI Ocupaciones

Affected Products (9): App (4), Client (1), Desktop Client (2), Server (7), Windows Client (1), core (1), graphapi (1), oauth2 (1), user_ldap (1)

Fecha de publicación	Base	Temp	Vulnerabilidad	Prod	Exp	Con	EPSS	CTI	CVE
2023-11-22	8.5	8.4	ownCloud core autenticación débil	Cloud Software	Not Defined	Official Fix	0.21237	0.03	CVE-2023-49105
2023-11-22	6.0	5.9	ownCloud oauth2 Subdomain Redirect	Cloud Software	Not Defined	Official Fix	0.00046	0.03	CVE-2023-49104
2023-11-22	7.6	7.5	ownCloud graphapi GetPhpInfo.php divulgación de información	Cloud Software	Not Defined	Official Fix	0.86982	0.00	CVE-2023-49103
2023-02-13	5.7	5.6	ownCloud App FileContentProvider.kt sql injection	Android App Software	Not Defined	Not Defined	0.00043	0.00	CVE-2023-23948
2023-02-13	4.2	4.2	ownCloud App Internal File directory traversal	Android App Software	Not Defined	Official Fix	0.00099	0.02	CVE-2023-24804
2022-01-16	6.3	6.0	ownCloud Client URL escalada de privilegios	Cloud Software	Not Defined	Official Fix	0.00788	0.00	CVE-2021-44537
2021-09-09	5.5	5.3	ownCloud user_ldap escalada de privilegios	Cloud Software	Not Defined	Official Fix	0.00054	0.00	CVE-2021-40537
2021-09-08	5.5	5.3	ownCloud Server Shareinfo Controller escalada de privilegios	Cloud Software	Not Defined	Official Fix	0.00074	0.00	CVE-2021-35949
2021-09-08	6.3	6.0	ownCloud Server Password Protected Public Links autenticación débil	Cloud Software	Not Defined	Official Fix	0.00074	0.00	CVE-2021-35948
2021-09-08	5.3	5.1	ownCloud Server Public Share Controller divulgación de información	Cloud Software	Not Defined	Official Fix	0.00142	0.00	CVE-2021-35947

9 no se muestran más entradas

🔒 Login Required

You need to signup and login to see more of the remaining 9 results.

◂ AnteriorVisión De ConjuntoPróximo ▸

Do you know our Splunk app?

Download it now for free!