Product · ONLYOFFICE

Document Server

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

Medium 6.4

CVE-2025-68936

ONLYOFFICE Docs before 9.2.1 allows XSS via the Color theme name. This is related to DocumentServer.

ONLYOFFICE Document Server

Dec 25, 2025
Medium 6.4

CVE-2025-68935

ONLYOFFICE Docs before 9.2.1 allows XSS via the Font field for the Multilevel list settings window. This is related to …

ONLYOFFICE Document Server

Dec 25, 2025
Medium 6.4

CVE-2025-68917

ONLYOFFICE Docs before 9.2.1 allows XSS in the textarea of the comment editing form. This is related to DocumentServer.

ONLYOFFICE Document Server

Dec 24, 2025