What’s Vulnerable › Products

Nextcloud Enterprise Server vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your Nextcloud Enterprise Server version is affected

Latest Nextcloud Enterprise Server vulnerabilities

• CVE-2022-39346 — Missing length validation of user displayname in nextcloud server (CVSS 6.5)
• CVE-2022-39364 — Exception logging in Sharepoint app reveals clear-text connection details (CVSS 6.5)
• CVE-2022-39330 — Database resource exhaustion for logged-in users via sharee recommendations with circles (CVSS 4.3)
• CVE-2022-39329 — Profile of disabled user stays accessible (CVSS 5.3)
• CVE-2022-39211 — Server-Side Request Forgery (SSRF) via potential filter bypass in Nextcloud Server (CVSS 5.3)
• CVE-2022-36074 — Authentication headers exposed on by Nextcloud Server (CVSS 7.5)