VendorsNextcloudnextcloud_enterprise_serverall versions
Vulnerabilities

Nextcloud Nextcloud Enterprise Server

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

6CVEs
CVE-2022-36074
Authentication headers exposed on by Nextcloud Server
Published 2022-09-15 · Modified
7.5EPSS 0.008
CVE-2022-39346
Missing length validation of user displayname in nextcloud server
Published 2022-11-25 · Modified
6.5EPSS 0.010
CVE-2022-39364
Exception logging in Sharepoint app reveals clear-text connection details
Published 2022-10-27 · Modified
6.5EPSS 0.005
CVE-2022-39211
Server-Side Request Forgery (SSRF) via potential filter bypass in Nextcloud Server
Published 2022-09-16 · Modified
5.3EPSS 0.010
CVE-2022-39329
Profile of disabled user stays accessible
Published 2022-10-27 · Modified
5.3EPSS 0.007
CVE-2022-39330
Database resource exhaustion for logged-in users via sharee recommendations with circles
Published 2022-10-27 · Modified
4.8EPSS 0.009