CollaboraOnline vulnerabilities

CVEs per yearBy the year they were published

1. 20213
2. 20235
3. 20244
4. 20253
5. 20263

Newest CVEs

• CVE-2026-46499

  Collabora Online: Read-only session authorization bypass permits live document edits

  CollaboraOnline · online

  Medium4.3
• CVE-2026-48164

  Collabora Online: Reflected HTML injection through host_session_id

  CollaboraOnline · online

  Medium4.7
• CVE-2026-23623

  Collabora Online vulnerable to Authorization Bypass

  CollaboraOnline · online

  Medium5.3
• CVE-2025-66208

  Configuration-Dependent RCE (OS Command Injection) in richdocumentscode proxy

  CollaboraOnline · online

  High7.2
• CVE-2025-27791

  Collabora Online Vulnerable to Arbitrary File Write

  CollaboraOnline · online

  High8.3
• CVE-2025-24796

  Remote Code Execution within Collabora Online jail with Macros Enabled

  CollaboraOnline · online

  Medium6.3
• CVE-2024-45045

  JavaScript Injection via url encoded values in links in Collabora Office Android

  CollaboraOnline · online

  Medium6.3
• CVE-2024-37311

  Collabora Online's remote host TLS certificates are not fully verified

  CollaboraOnline · online

  High8.2
• CVE-2024-29182

  Collabora Online Stored Cross-Site-Scripting vulnerability via tooltip

  CollaboraOnline · online

  Medium6.1
• CVE-2024-25114

  Sensitive Information Disclosure (JailID) to users in Collabora Online

  CollaboraOnline · online

  Low2.6