Skip to content
OpenAdvisories

Vendor

OwnCloud

10 known vulnerabilities.

OwnCloud at a glance

Last 12 months
6
Critical · all time
3
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 3 5 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 1 vulnerability, 1 critical March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 5 vulnerabilities, 2 critical August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202652
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202611
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

ownCloud 10 4 Android 2 OwnCloud 2 ownCloud Server 1 SharePoint 1 Anti-Virus for ownCloud 1 ownCloud Core 1 DrawIO for ownCloud 1 ownCloud android app 2.21.1 0 ownCloud android app 3.0 0 ownCloud Android app < 3.0.4 0 ownCloud app for Android < 3.0 0

Latest advisories

  • Critical max 10.0
    WID-SEC-2023-2985 3 CVEs 2 exploited rev. 3

    ownCloud: Mehrere Schwachstellen

    Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in ownCloud ausnutzen, um Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen und Dateien zu manipulieren.

    OwnCloud Linux Windows
    first Nov 21, 2023
  • Medium max 5.3
    WID-SEC-2025-2493 1 CVE

    ownCloud Guests: Schwachstelle ermöglicht Offenlegung von Informationen

    Ein entfernter, anonymer Angreifer kann eine Schwachstelle in ownCloud Guests ausnutzen, um Informationen offenzulegen.

    OwnCloud Linux Windows
  • Medium max 6.8
    WID-SEC-2024-3533 1 CVE

    ownCloud Android App: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen

    Ein Angreifer mit physischem Zugriff kann eine Schwachstelle im ownCloud Android APK ausnutzen, um Sicherheitsvorkehrungen zu umgehen.

    OwnCloud Android
  • High
    WID-SEC-2024-2090 0 CVEs

    ownCloud: Mehrere Schwachstellen

    Ein entfernter anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in ownCloud ausnutzen, um falsche Informationen darzustellen, einen Denial-of-Service-Zustand zu erzeugen, Sicherheitsmaßnahmen zu umgehen, Daten zu ändern und vertrauliche Inf…

    OwnCloud Windows
  • Medium
    WID-SEC-2024-0933 0 CVEs

    ownCloud: Mehrere Schwachstellen

    Ein entfernter Angreifer kann mehrere Schwachstellen in ownCloud ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen oder Sicherheitsmaßnahmen zu umgehen.

    OwnCloud Windows Android
All Critical High Medium Low Exploited only Public exploit

10 results · Feed

  • High 8.2
    CVE-2025-53831

    DrawIO for ownCloud 10 is vulnerable to Stored XSS

    DrawIO for ownCloud is an application for using DrawIO with the file storage, synchronization, and sharing application ownCloud Classic. In DrawIO for ownCloud prior to version 1.0.2, which corresponds to ownCloud 10 prior to version 10.15.3, attackers with a…

    OwnCloud ownCloud 10 DrawIO for ownCloud
  • Critical 9.1
    CVE-2025-53830

    Anti-Virus for ownCloud 10 is vulnerable to Server-Side Request Forgery (SSRF)

    Anti-Virus for ownCloud is an anti-virus application for file storage, synchronization, and sharing application ownCloud. Versions of Anti-Virus for ownCloud before 1.2.3 are vulnerable to Server-Side Request Forgery (SSRF). This corresponds to versions of ow…

    OwnCloud ownCloud 10 Anti-Virus for ownCloud
  • High 8.0
    CVE-2025-53829

    ownCloud 10 is vulnerable to Relative Path Traversal

    ownCloud is a file storage, synchronization, and sharing application. In ownCloud 10 prior to version 10.15.3, an attacker with administrative privileges can exploit a path traversal vulnerability in the system to execute arbitrary code. Upgrade ownCloud 10 t…

    OwnCloud ownCloud 10
  • High 8.5
    CVE-2025-53828

    SharePoint for ownCloud 10 is vulnerable to Server-Side Request Forgery (SSRF)

    SharePoint for ownCloud is an application for using SharePoint with the file storage, synchronization, and sharing application ownCloud Classic. In SharePoint for ownCloud prior to version 0.4.1, which corresponds to ownCloud 10 prior to 10.15.3, an attacker …

    OwnCloud ownCloud 10 SharePoint
  • Critical 9.1
    CVE-2025-53827

    ownCloud Core: Updater has an exposed dangerous method or function

    ownCloud Core is the server-side component of the file storage, synchronization, and sharing application ownCloud Classic. In versions prior to 10.15.3, the Updater on ownCloud 10 before 10.15.3 has an exposed dangerous method or function. Attackers with admi…

    OwnCloud ownCloud Core
  • Critical 9.8
    CVE-2019-25337

    OwnCloud 8.1.8 - Username Disclosure

    OwnCloud 8.1.8 contains a username enumeration vulnerability that allows remote attackers to discover user accounts by manipulating the share.php endpoint. Attackers can send crafted GET requests to /index.php/core/ajax/share.php with a wildcard search parame…

    OwnCloud OwnCloud
  • Medium 6.2
    CVE-2023-23948

    ownCloud Android app vulnerable to SQL Injection

    The ownCloud Android app allows ownCloud users to access, share, and edit files and folders. Version 2.21.1 of the ownCloud Android app is vulnerable to SQL injection in `FileContentProvider.kt`. This issue can lead to information disclosure. Two databases, `…

    OwnCloud Android Android
  • Medium 5.0
    CVE-2023-24804

    ownCloud Android app vulnerable to Path Traversal

    The ownCloud Android app allows ownCloud users to access, share, and edit files and folders. Prior to version 3.0, the app has an incomplete fix for a path traversal issue and is vulnerable to two bypass methods. The bypasses may lead to information disclosur…

    OwnCloud Android Android
  • Unscored —
    CVE-2013-0203

    Multiple cross-site scripting (XSS) vulnerabilities in ownCloud 4.5.5, 4.0.10, and earlier allow remote attackers to in…

    OwnCloud ownCloud Server
  • Unscored —
    CVE-2013-0202

    Cross-site scripting (XSS) vulnerability in ownCloud 4.5.5, 4.0.10, and earlier allows remote attackers to inject arbit…

    OwnCloud OwnCloud