Product by Collabora
Online
8 known vulnerabilities in Online (Collabora), 1 of them actively exploited (CISA KEV).
Key figures
8
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-110447 | Collabora Online – Built-in CODE Server OS Command Injection Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2025-66208 | Configuration-Dependent RCE (OS Command Injection) in richdocumentscode proxy | 9.8 | |
| Critical | CVE-2021-32744 | Unauthenticated attacker could gain access to currently open files | 9.8 | |
| High | CVE-2021-43817 | Reflected Cross-Site-Scripting vulnerability in Collabora Online | 8.2 | |
| High | CVE-2021-32745 | Reflected Cross-Site-Scripting vulnerability | 7.3 | |
| Medium | CVE-2024-45045 | JavaScript Injection via url encoded values in links in Collabora Office Android | 6.3 | |
| Medium | CVE-2023-31145 | Reflected XSS vulnerability in CollaboraOnline | 4.3 | |
| Medium | CVE-2024-25114 | Sensitive Information Disclosure (JailID) to users in Collabora Online | 2.6 |