Skip to content
OpenAdvisories

Vendor

ONLYOFFICE

10 known vulnerabilities.

Products

Document Server 4 ONLYOFFICE Docs 2 DocumentServer 1 Docs (DocumentServer) 1 Workspace 1 ONLYOFFICE DocSpace 1
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 4.0
    CVE-2026-110652

    ONLYOFFICE DocumentServer before 10.0.0 SSRF via downloadfile isInJwtToken Bypass

    ONLYOFFICE DocumentServer before 10.0.0 contains an unauthenticated server-side request forgery vulnerability in the /downloadfile/:docid endpoint that allows remote attackers to bypass the private-IP request-filtering-agent by exploiting the isInJwtToken fla…

    ONLYOFFICE DocumentServer
  • Medium 6.4
    CVE-2025-68936

    ONLYOFFICE Docs before 9.2.1 allows XSS via the Color theme name. This is related to DocumentServer.

    ONLYOFFICE Document Server
  • Medium 6.4
    CVE-2025-68935

    ONLYOFFICE Docs before 9.2.1 allows XSS via the Font field for the Multilevel list settings window. This is related to …

    ONLYOFFICE Document Server
  • Medium 6.4
    CVE-2025-68917

    ONLYOFFICE Docs before 9.2.1 allows XSS in the textarea of the comment editing form. This is related to DocumentServer.

    ONLYOFFICE Document Server
  • Medium 6.1
    CVE-2025-5301 EPSS 63%

    Reflected Cross-Site Scripting in ONLYOFFICE Docs (DocumentServer)

    ONLYOFFICE Docs (DocumentServer) in versions equal and below 8.3.1 are affected by a reflected cross-site scripting (XSS) issue when opening files via the WOPI protocol. Attackers could inject malicious scripts via crafted HTTP POST requests, which are then r…

    ONLYOFFICE Docs (DocumentServer)
  • Medium 6.4
    CVE-2024-11750

    ONLYOFFICE DocSpace <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The ONLYOFFICE DocSpace plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'onlyoffice-docspace' shortcode in all versions up to, and including, 2.1.1 due to insufficient input sanitization and output escaping on user supplied …

    ONLYOFFICE ONLYOFFICE DocSpace Web / CMS
  • Medium 6.4
    CVE-2024-11450

    ONLYOFFICE Docs <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The ONLYOFFICE Docs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'onlyoffice' shortcode in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. T…

    ONLYOFFICE ONLYOFFICE Docs Web / CMS
  • Medium 5.4
    CVE-2022-47412

    ONLYOFFICE Workspace Search Stored XSS

    Given a malicious document provided by an attacker, the ONLYOFFICE Workspace DMS is vulnerable to a stored (persistent, or "Type II") cross-site scripting (XSS) condition.

    ONLYOFFICE Workspace