Unscored DSA-3373-1 8 CVEs

owncloud - security update

Published Oct 18, 2015 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 8	owncloud	7.0.4+dfsg-4~deb8u3

Vulnerabilities 8

Unscored —

CVE-2015-4716 EPSS 25%

Directory traversal vulnerability in the routing component in ownCloud Server before 7.0.6 and 8.0.x before 8.0.4, when…

Oct 21, 2015
Unscored —

CVE-2015-4717

The filename sanitization component in ownCloud Server before 6.0.8, 7.0.x before 7.0.6, and 8.0.x before 8.0.4 does no…

Oct 21, 2015
Unscored —

CVE-2015-4718

The external SMB storage driver in ownCloud Server before 6.0.8, 7.0.x before 7.0.6, and 8.0.x before 8.0.4 allows remo…

Oct 21, 2015
Unscored —

CVE-2015-5953

Cross-site scripting (XSS) vulnerability in the activity application in ownCloud Server before 7.0.5 and 8.0.x before 8…

Oct 21, 2015
Unscored —

CVE-2015-5954

The virtual filesystem in ownCloud Server before 6.0.9, 7.0.x before 7.0.7, and 8.0.x before 8.0.5 does not consider th…

Oct 21, 2015
Unscored —

CVE-2015-6500

Directory traversal vulnerability in ownCloud Server before 8.0.6 and 8.1.x before 8.1.1 allows remote authenticated us…

Oct 26, 2015
Unscored —

CVE-2015-6670

ownCloud Server before 7.0.8, 8.0.x before 8.0.6, and 8.1.x before 8.1.1 does not properly check ownership of calendars…

Oct 26, 2015
Unscored —

CVE-2015-7699

The files_external app in ownCloud Server before 7.0.9, 8.0.x before 8.0.7, and 8.1.x before 8.1.2 allows remote authen…

Oct 26, 2015