Vulnerabilities > Nextcloud > Nextcloud Server > 14.0.2

DATE CVE VULNERABILITY TITLE RISK
2020-02-04 CVE-2019-15612 Session Fixation vulnerability in Nextcloud Server
A bug in Nextcloud Server 15.0.2 causes pending 2FA logins to not be correctly expired when the password of the user is reset.
low complexity
nextcloud CWE-384
5.9
2019-07-30 CVE-2019-5449 Missing Authorization vulnerability in Nextcloud Server
A missing check in the Nextcloud Server prior to version 15.0.1 causes leaking of calendar event names when adding or modifying confidential or private events.
network
low complexity
nextcloud CWE-862
4.3