Vendor

    Collaboraonline

    18 known vulnerabilities in products by Collaboraonline, 0 of them actively exploited (CISA KEV).

    Key figures

    18

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Collaboraonline
    CriticalCVE-2025-66208

    Configuration-Dependent RCE (OS Command Injection) in richdocumentscode proxy

    also in 1 other product

    		9.8
    CriticalCVE-2021-32744

    Unauthenticated attacker could gain access to currently open files

    also in 1 other product

    		9.8
    HighCVE-2025-27791

    Collabora Online Vulnerable to Arbitrary File Write

    		—
    HighCVE-2021-43817

    Reflected Cross-Site-Scripting vulnerability in Collabora Online

    also in 1 other product

    		8.2
    HighCVE-2023-34088

    Collabora Online has Stored Cross-Site-Scripting vulnerability in admin interface

    also in 1 other product

    		8.7
    HighCVE-2021-32745

    Reflected Cross-Site-Scripting vulnerability

    also in 1 other product

    		7.3
    MediumCVE-2025-24796

    Remote Code Execution within Collabora Online jail with Macros Enabled

    		—
    HighCVE-2023-49788

    Improper handling of browser-side provided input in richdocuments path handling

    also in 1 other product

    		7.2
    MediumCVE-2026-48164

    Collabora Online: Reflected HTML injection through host_session_id

    		4.7
    MediumCVE-2026-46499

    Collabora Online: Read-only session authorization bypass permits live document edits

    		4.3
    HighCVE-2023-49782

    Cross-Site-Scripting vulnerability in error message passing in richdocumentscode

    also in 1 other product

    		7.1
    HighCVE-2023-48314

    Unescaped passing of the request URL in Collabora Online

    also in 1 other product

    		7.1
    HighCVE-2024-37311

    Collabora Online's remote host TLS certificates are not fully verified

    		8.2
    MediumCVE-2026-23623

    Collabora Online vulnerable to Authorization Bypass

    		5.3
    MediumCVE-2024-45045

    JavaScript Injection via url encoded values in links in Collabora Office Android

    also in 1 other product

    		6.3
    MediumCVE-2024-29182

    Collabora Online Stored Cross-Site-Scripting vulnerability via tooltip

    also in 1 other product

    		6.1
    MediumCVE-2023-31145

    Reflected XSS vulnerability in CollaboraOnline

    also in 1 other product

    		4.3
    MediumCVE-2024-25114

    Sensitive Information Disclosure (JailID) to users in Collabora Online

    also in 1 other product

    		2.6

    Products

    Products by Collaboraonline
    Online180