Product by Nextcloud
Richdocuments
9 known vulnerabilities in Richdocuments (Nextcloud), 0 of them actively exploited (CISA KEV).
Key figures
9
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2021-37628 | File Drop can be bypassed using Richdocuments app in nextcloud | 7.5 | |
| Medium | CVE-2021-37629 | Lack of ratelimit on Richdocuments OCS endpoint in nextcloud | 5.3 | |
| Medium | CVE-2021-39223 | File path disclosure of shared files in Richdocuments application | 4.8 | |
| Medium | CVE-2023-28645 | Secure view can be bypassed by using internal API endpoint in Nextcloud richdocuments | 5.7 | |
| Medium | CVE-2023-25150 | Document content of files can be obtained through Collabora for files of other users | 5.8 | |
| Medium | CVE-2022-31024 | Federated editing allows iframing remote servers by default in richdocuments | 6.5 | |
| Medium | CVE-2021-32748 | WOPI API not protected by credentials/IP check | 4.3 | |
| Low | CVE-2026-67400 | Nextcloud Richdocuments: Improper Access Control | 3.5 | |
| Medium | CVE-2023-25159 | Nextcloud Server previews are accessible without a watermark | 2.3 |