Product by Collaboraonline
Online
16 known vulnerabilities in Online (Collaboraonline), 0 of them actively exploited (CISA KEV).
Key figures
16
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2025-66208 | Configuration-Dependent RCE (OS Command Injection) in richdocumentscode proxy | 9.8 | |
| Critical | CVE-2021-32744 | Unauthenticated attacker could gain access to currently open files | 9.8 | |
| High | CVE-2025-27791 | Collabora Online Vulnerable to Arbitrary File Write | — | |
| High | CVE-2021-43817 | Reflected Cross-Site-Scripting vulnerability in Collabora Online | 8.2 | |
| High | CVE-2023-34088 | Collabora Online has Stored Cross-Site-Scripting vulnerability in admin interface | 8.7 | |
| High | CVE-2021-32745 | Reflected Cross-Site-Scripting vulnerability | 7.3 | |
| Medium | CVE-2025-24796 | Remote Code Execution within Collabora Online jail with Macros Enabled | — | |
| High | CVE-2023-49788 | Improper handling of browser-side provided input in richdocuments path handling | 7.2 | |
| High | CVE-2023-49782 | Cross-Site-Scripting vulnerability in error message passing in richdocumentscode | 7.1 | |
| High | CVE-2023-48314 | Unescaped passing of the request URL in Collabora Online | 7.1 | |
| High | CVE-2024-37311 | Collabora Online's remote host TLS certificates are not fully verified | 8.2 | |
| Medium | CVE-2026-23623 | Collabora Online vulnerable to Authorization Bypass | 5.3 | |
| Medium | CVE-2024-45045 | JavaScript Injection via url encoded values in links in Collabora Office Android | 6.3 | |
| Medium | CVE-2024-29182 | Collabora Online Stored Cross-Site-Scripting vulnerability via tooltip | 6.1 | |
| Medium | CVE-2023-31145 | Reflected XSS vulnerability in CollaboraOnline | 4.3 | |
| Medium | CVE-2024-25114 | Sensitive Information Disclosure (JailID) to users in Collabora Online | 2.6 |