Vulnerabilities > Nextcloud > Nextcloud Server > 12.0.13

DATE CVE VULNERABILITY TITLE RISK
2018-10-30 CVE-2018-16465 Improper Authentication vulnerability in Nextcloud Server
Missing state in Nextcloud Server prior to 14.0.0 would not enforce the use of a second factor at login if the the provider of the second factor failed to load.
network
high complexity
nextcloud CWE-287
5.3
2018-10-30 CVE-2018-16464 Improper Authentication vulnerability in Nextcloud Server
A missing access check in Nextcloud Server prior to 14.0.0 could lead to continued access to password protected link shares when the owner had changed the password.
network
low complexity
nextcloud CWE-287
5.7
2018-08-13 CVE-2018-3780 Cross-site Scripting vulnerability in Nextcloud Server
A missing sanitization of search results for an autocomplete field in NextCloud Server <13.0.5 could lead to a stored XSS requiring user-interaction.
network
low complexity
nextcloud CWE-79
5.4