Onlyoffice 漏洞

时间轴

类型

Not Defined25

产品

ONLYOFFICE Document Server10
ONLYOFFICE Server6
ONLYOFFICE DocumentServer5
ONLYOFFICE Community Server1
ONLYOFFICE Docs1

修正

Official Fix9
Temporary Fix0
Workaround0
Unavailable0
Not Defined16

易受攻击性

High0
Functional0
Proof-of-Concept7
Unproven0
Not Defined18

访问向量

Not Defined0
Physical0
Local1
Adjacent8
Network16

身份验证

Not Defined0
High0
Low20
None5

用户交互

Not Defined0
Required4
None21

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤42
≤52
≤65
≤78
≤85
≤93
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤42
≤52
≤66
≤77
≤85
≤93
≤100

VulDB

≤10
≤20
≤30
≤45
≤52
≤65
≤710
≤83
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤62
≤70
≤89
≤91
≤108

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

供应商

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k4
<2k11
<5k10
<10k0
<25k0
<50k0
<100k0
≥100k0

本日攻击

<1k24
<2k1
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

攻击市场容量

🔴 CTI 活动

Affected Products (7): Community Server (1), Docs (1), Document Server (10), DocumentServer (5), Document Server Example (1), Server (6), Workspace DMS (1)

已发布BaseTemp漏洞Prod易修正EPSSCTICVE
2023-08-145.95.8ONLYOFFICE Document Server JavaScript File 拒绝服务未知Not DefinedOfficial Fix0.002700.00CVE-2023-30188
2023-08-148.07.9ONLYOFFICE Document Server JavaScript File 信息公开未知Not DefinedOfficial Fix0.003620.04CVE-2023-30187
2023-08-146.36.0ONLYOFFICE Document Server JavaScript File 内存损坏未知Not DefinedOfficial Fix0.003070.02CVE-2023-30186
2023-06-228.07.9ONLYOFFICE Community Server UploadProgress.ashx 权限升级未知Not DefinedOfficial Fix0.006330.04CVE-2023-34939
2023-03-196.56.5ONLYOFFICE Docs libgcc_s.so.1 权限升级未知Not DefinedNot Defined0.000650.07CVE-2022-48422
2023-02-084.44.4ONLYOFFICE Workspace DMS Document 跨网站脚本未知Not DefinedOfficial Fix0.000560.06CVE-2022-47412
2023-01-236.86.5ONLYOFFICE Server Document Editor Service 权限升级未知Proof-of-ConceptNot Defined0.001000.04CVE-2021-43449
2023-01-233.53.2ONLYOFFICE Server Macros 跨网站脚本未知Proof-of-ConceptNot Defined0.000720.02CVE-2021-43446
2023-01-236.05.8ONLYOFFICE Server Signed Document 权限升级未知Proof-of-ConceptNot Defined0.001050.04CVE-2021-43444
2023-01-234.54.3ONLYOFFICE Server User Name 权限升级未知Proof-of-ConceptNot Defined0.000710.03CVE-2021-43448

15 更多条目未显示

🔒 Login Required

You need to signup and login to see more of the remaining 15 results.

◂ 上一步一览下一步 ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!