What’s Vulnerable › Products

com.nextcloud.client vulnerabilities

28 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your com.nextcloud.client version is affected

Latest com.nextcloud.client vulnerabilities

• CVE-2023-49790 — App PIN code can be bypassed in Nextcloud Files iOS (CVSS 4.3)
• CVE-2023-28999 — Nextcloud: Lack of authenticity of metadata keys allows a malicious server to gain access to E2EE folders (CVSS 6.4)
• CVE-2023-28647 — App pin of the iOS app can be bypassed in Nextcloud iOS (CVSS 6.8)
• CVE-2023-28646 — App lockout in nextcloud Android app can be bypassed via thirdparty apps (CVSS 2.4)
• CVE-2022-39210 — Access to internal files of the Nextcloud Android app (CVSS 5.5)
• CVE-2022-29160 — Sensitive files/data exist after deletion of user account in Nextcloud Android (CVSS 3.3)
• CVE-2022-24886 — Exposure of Sensitive Information to an Unauthorized Actor in com.nextcloud.client (CVSS 3.8)
• CVE-2022-24885 — Improper Authentication in Nextcloud Android Files (CVSS 2.4)
• CVE-2021-41166 — Permission bypass in Nextcloud Android App (CVSS 5.3)
• CVE-2021-43863 — SQL Injection in FileContentProvider (GHSL-2021-1007) (CVSS 7.5)
• CVE-2021-32727 — End-to-end encryption device setup did not verify public key (CVSS 7.5)
• CVE-2021-32694 — Malicious Android application can crash the Nextcloud Android Client (CVSS 5.5)
• CVE-2021-32695 — Malicious Android app could access Shared Preferences of the Nextcloud Android client (CVSS 3.3)
• CVE-2021-22912 — (CVSS 6.5)
• CVE-2021-22905 — (CVSS 6.5)
• CVE-2021-22896 — (CVSS 4.3)
• CVE-2021-32658 — Sensitive data may not be removed from storage on account removal (CVSS 4.6)
• CVE-2019-15622 — (CVSS 2.4)
• CVE-2019-15615 — (CVSS 6.1)
• CVE-2019-15614 — (CVSS 5.4)
• CVE-2019-15611 — (CVSS 4.9)
• CVE-2019-5455 — (CVSS 6.8)
• CVE-2019-5454 — (CVSS 9.8)
• CVE-2019-5453 — (CVSS 6.1)
• CVE-2019-5452 — (CVSS 2.4)