Known Vulnerabilities for Owncloud by Owncloud

Listed below are 10 of the newest known vulnerabilities associated with "Owncloud" by "Owncloud".

These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.

Data on known vulnerable versions is also displayed based on information from known CPEs

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2026-84282 json A Server-Side Request Forgery (SSRF) vulnerability exists in the ONLYOFFICE ownCloud Integration plugin version 9.12. The /ap... Not Provided 2026-09-08 2026-09-08
CVE-2025-53831 json DrawIO for ownCloud is an application for using DrawIO with the file storage, synchronization, and sharing application ownClo... Not Provided 2026-07-06 2026-07-06
CVE-2025-53830 json Anti-Virus for ownCloud is an anti-virus application for file storage, synchronization, and sharing application ownCloud. Ver... Not Provided 2026-07-06 2026-07-08
CVE-2025-53829 json ownCloud is a file storage, synchronization, and sharing application. In ownCloud 10 prior to version 10.15.3, an attacker wi... Not Provided 2026-07-06 2026-07-08
CVE-2025-53828 json SharePoint for ownCloud is an application for using SharePoint with the file storage, synchronization, and sharing applicatio... Not Provided 2026-07-06 2026-07-08
CVE-2025-53827 json ownCloud Core is the server-side component of the file storage, synchronization, and sharing application ownCloud Classic. In... Not Provided 2026-07-06 2026-07-08
CVE-2023-49105 json An issue was discovered in ownCloud owncloud/core before 10.13.1. An attacker can access, modify, or delete any file without ... Not Provided 2023-11-21 2026-08-28
CVE-2023-24804 json The ownCloud Android app allows ownCloud users to access, share, and edit files and folders. Prior to version 3.0, the app ha... 4.4 - MEDIUM 2023-02-13 2023-02-22
CVE-2023-23948 json The ownCloud Android app allows ownCloud users to access, share, and edit files and folders. Version 2.21.1 of the ownCloud A... 5.5 - MEDIUM 2023-02-13 2023-02-21
CVE-2022-43679 json The Docker image of ownCloud Server through 10.11 contains a misconfiguration that renders the trusted_domains config useless... 5.3 - MEDIUM 2022-11-10 2022-11-15
Results limited to 10 most recent vulnerabilities

Known Affected Configurations (CPE V2.3)

Type Vendor Product Version Update Edition Language
ApplicationOwncloudOwncloud9.1.8
ApplicationOwncloudOwncloud9.1.8
ApplicationOwncloudOwncloud9.1.8
ApplicationOwncloudOwncloud9.1.8
ApplicationOwncloudOwncloud9.1.7
ApplicationOwncloudOwncloud9.1.7
ApplicationOwncloudOwncloud9.1.7
ApplicationOwncloudOwncloud9.1.7
ApplicationOwncloudOwncloud9.1.6
ApplicationOwncloudOwncloud9.1.6
ApplicationOwncloudOwncloud9.1.5
ApplicationOwncloudOwncloud9.1.5
ApplicationOwncloudOwncloud9.1.5
ApplicationOwncloudOwncloud9.1.5
ApplicationOwncloudOwncloud9.1.4
ApplicationOwncloudOwncloud9.1.4
ApplicationOwncloudOwncloud9.1.4
ApplicationOwncloudOwncloud9.1.4
ApplicationOwncloudOwncloud9.1.3
ApplicationOwncloudOwncloud9.1.3
Results limited to 20 most recent known configurations

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report