Vulnerabilities > Nextcloud > Medium

DATE CVE VULNERABILITY TITLE RISK
2023-10-16 CVE-2023-45660 Server-Side Request Forgery (SSRF) vulnerability in Nextcloud Mail
Nextcloud mail is an email app for the Nextcloud home server platform.
network
low complexity
nextcloud CWE-918
4.3
2023-08-10 CVE-2023-39958 Improper Restriction of Excessive Authentication Attempts vulnerability in Nextcloud Server
Nextcloud Server provides data storage for Nextcloud, an open source cloud platform.
network
low complexity
nextcloud CWE-307
5.3
2023-08-10 CVE-2023-39959 Improper Access Control vulnerability in Nextcloud Server
Nextcloud Server provides data storage for Nextcloud, an open source cloud platform.
network
low complexity
nextcloud CWE-284
5.3
2023-08-10 CVE-2023-39961 Improper Access Control vulnerability in Nextcloud Server
Nextcloud Server provides data storage for Nextcloud, an open source cloud platform.
network
low complexity
nextcloud CWE-284
4.3
2023-08-10 CVE-2023-39955 Cross-site Scripting vulnerability in Nextcloud Notes
Notes is a note-taking app for Nextcloud, an open-source cloud platform.
network
low complexity
nextcloud CWE-79
6.1
2023-08-10 CVE-2023-39952 Improper Access Control vulnerability in Nextcloud Server
Nextcloud Server provides data storage for Nextcloud, an open source cloud platform.
network
low complexity
nextcloud CWE-284
6.5
2023-08-10 CVE-2023-39953 Incorrect Implementation of Authentication Algorithm vulnerability in Nextcloud User Oidc
user_oidc provides the OIDC connect user backend for Nextcloud, an open-source cloud platform.
network
high complexity
nextcloud CWE-303
4.8
2023-06-23 CVE-2023-35171 Open Redirect vulnerability in Nextcloud Server 26.0.0
NextCloud Server and NextCloud Enterprise Server provide file storage for Nextcloud, a self-hosted productivity platform.
network
low complexity
nextcloud CWE-601
6.1
2023-06-23 CVE-2023-35173 Unspecified vulnerability in Nextcloud End-To-End Encryption
Nextcloud End-to-end encryption app provides all the necessary APIs to implement End-to-End encryption on the client side.
network
low complexity
nextcloud
6.5
2023-05-30 CVE-2023-33183 Unspecified vulnerability in Nextcloud Calendar
Calendar app for Nextcloud easily sync events from various devices with your Nextcloud.
network
low complexity
nextcloud
4.3