Vulnerabilities > Nextcloud > Nextcloud Server > 17.0.5

DATE CVE VULNERABILITY TITLE RISK
2020-11-02 CVE-2020-8173 Missing Encryption of Sensitive Data vulnerability in Nextcloud Server
A too small set of random characters being used for encryption in Nextcloud Server 18.0.4 allowed decryption in shorter time than intended.
network
nextcloud CWE-311
3.5
2020-05-12 CVE-2020-8155 Cross-site Scripting vulnerability in Nextcloud Server
An outdated 3rd party library in the Files PDF viewer for Nextcloud Server 18.0.2 caused a Cross-site scripting vulnerability when opening a malicious PDF.
network
low complexity
nextcloud CWE-79
5.4