What’s Vulnerable › Products

ONLYOFFICE Document Server vulnerabilities

23 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your ONLYOFFICE Document Server version is affected

Exploited ONLYOFFICE Document Server vulnerabilities

• CVE-2021-3199 — ONLYOFFICE Docs Server Path Traversal Vulnerability

Latest ONLYOFFICE Document Server vulnerabilities

• CVE-2026-110385 — (CVSS 8.7)
• CVE-2025-68936 — (CVSS 6.1)
• CVE-2025-68935 — (CVSS 6.1)
• CVE-2025-68917 — (CVSS 6.4)
• CVE-2023-46988 — (CVSS 6.7)
• CVE-2023-50883 — (CVSS 6.1)
• CVE-2023-30188 — (CVSS 7.5)
• CVE-2023-30187 — (CVSS 9.8)
• CVE-2023-30186 — (CVSS 9.8)
• CVE-2022-48422 — (CVSS 7.8)
• CVE-2022-29777 — (CVSS 9.8)
• CVE-2022-29776 — (CVSS 9.8)
• CVE-2022-24229 — (CVSS 6.1)
• CVE-2021-25833 — (CVSS 9.8)
• CVE-2021-25832 — (CVSS 9.8)
• CVE-2021-25831 — (CVSS 9.8)
• CVE-2021-25830 — (CVSS 9.8)
• CVE-2021-25829 — (CVSS 7.5)
• CVE-2021-3199 — ONLYOFFICE Docs Server Path Traversal Vulnerability (CVSS 9.8) — exploited
• CVE-2020-11537 — (CVSS 9.8)
• CVE-2020-11536 — (CVSS 9.8)
• CVE-2020-11535 — (CVSS 9.8)
• CVE-2020-11534 — (CVSS 9.8)