Product by Nextcloud
Nextcloud Enterprise Server
10 known vulnerabilities in Nextcloud Enterprise Server (Nextcloud), 0 of them actively exploited (CISA KEV).
Key figures
10
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Medium | CVE-2022-39330 | Database resource exhaustion for logged-in users via sharee recommendations with circles | 4.8 | |
| High | CVE-2022-36074 | Authentication headers exposed on by Nextcloud Server | 6.4 | |
| High | CVE-2026-45722 | Nextcloud Security-advisories: SQL Injection | 7.1 | |
| Medium | CVE-2026-45810 | Nextcloud: Propfind requests for file comments allowed to load comments for other files | 6.8 | |
| Medium | CVE-2022-39346 | Missing length validation of user displayname in nextcloud server | 3.5 | |
| Medium | CVE-2026-45691 | Nextcloud: Bypass of second factor authentication on DAV endpoints | 5.9 | |
| Medium | CVE-2026-45690 | Nextcloud: Two-Factor Authentication Bypass via Pending Session Token Replay | 5.9 | |
| Medium | CVE-2022-39211 | Server-Side Request Forgery (SSRF) via potential filter bypass in Nextcloud Server | 3.0 | |
| Medium | CVE-2022-39329 | Profile of disabled user stays accessible | 3.5 | |
| Medium | CVE-2022-39364 | Exception logging in Sharepoint app reveals clear-text connection details | 4.0 |