Product by ownCloud

ownCloud Server

108 known vulnerabilities in ownCloud Server (ownCloud), 1 of them actively exploited (CISA KEV).

108

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in ownCloud Server (ownCloud)

Critical	CVE-2023-49105	ownCloud Improper Authentication Vulnerability In CISA KEValso in 1 other product	9.8	21.11.2023
Critical	CVE-2014-2052	ownCloud: XML External Entity (XXE) also in 1 other product	9.8	11.02.2020
High	CVE-2016-1499	ownCloud Server: Information Disclosure also in 1 other product	8.5	08.01.2016
Not rated	CVE-2015-4716	ownCloud Server: Path Traversal also in 2 other products	—	21.10.2015
Medium	CVE-2014-2050	ownCloud: Cross-Site Request Forgery (CSRF) also in 1 other product	6.5	23.01.2020
Not rated	CVE-2014-2044	ownCloud: Code Execution also in 1 other product	—	06.10.2014
Medium	CVE-2021-29659	ownCloud Server: Improper Access Control	6.5	20.05.2021
Medium	CVE-2016-1501	ownCloud Server: Information Disclosure also in 1 other product	4.3	08.01.2016
Not rated	CVE-2012-2270	ownCloud: Open Redirect also in 1 other product	—	20.04.2012
Not rated	CVE-2013-1942	Happyworm jPlayer: Cross-Site Scripting (XSS) also in 2 other products	—	15.08.2013
Medium	CVE-2015-4715	ownCloud Server: security vulnerability also in 1 other product	4.9	17.02.2020
Not rated	CVE-2014-2053	ownCloud Server: XML External Entity (XXE)	—	04.06.2014
Not rated	CVE-2015-7699	ownCloud Server: Code Execution	—	26.10.2015
Medium	CVE-2016-1498	ownCloud Server: Cross-Site Scripting (XSS) also in 1 other product	6.1	08.01.2016
Not rated	CVE-2012-4389	ownCloud: Code Execution also in 1 other product	—	05.09.2012
Not rated	CVE-2015-4718	ownCloud Server: security vulnerability also in 1 other product	—	21.10.2015
Medium	CVE-2013-0202	ownCloud: Cross-Site Scripting (XSS) also in 1 other product	6.1	22.11.2019
Not rated	CVE-2015-4717	ownCloud Server: Infinite Loop also in 1 other product	—	21.10.2015
Not rated	CVE-2012-4392	ownCloud Server: Authentication Bypass	—	05.09.2012
Not rated	CVE-2012-2269	ownCloud: Cross-Site Scripting (XSS) also in 1 other product	—	20.04.2012
Not rated	CVE-2013-0303	ownCloud: security vulnerability also in 1 other product	—	23.03.2014
Not rated	CVE-2015-6500	ownCloud Server: Path Traversal	—	26.10.2015
Not rated	CVE-2012-4396	ownCloud: Cross-Site Scripting (XSS) also in 1 other product	—	05.09.2012
Not rated	CVE-2014-4929	ownCloud Server: Path Traversal also in 1 other product	—	20.08.2014
Not rated	CVE-2014-2056	ownCloud Server: XML External Entity (XXE)	—	04.06.2014

All vulnerabilities in search

News

ownCloud Flaw Exploited to Steal Nuclear Records From Philippine Research Bodythehackernews, 28.08.2026
CISA Adds 10 CVEs to Known Exploited Vulnerabilities Catalog, Five with Three-day Mitigation Deadlinessans-newsbites-mail, 28.08.2026

All products by ownCloud

Key figures

Vulnerabilities

News