ownCloud vulnerabilities

CVEs per yearBy the year they were published

1. 20192
2. 20232
3. 20266

Newest CVEs

• CVE-2025-53831

  DrawIO for ownCloud 10 is vulnerable to Stored XSS

  owncloud · DrawIO for ownCloud

  High8.2
• CVE-2025-53830

  Anti-Virus for ownCloud 10 is vulnerable to Server-Side Request Forgery (SSRF)

  owncloud · Anti-Virus for ownCloud

  Critical9.1
• CVE-2025-53829

  ownCloud 10 is vulnerable to Relative Path Traversal

  owncloud · ownCloud 10

  High8.0
• CVE-2025-53828

  SharePoint for ownCloud 10 is vulnerable to Server-Side Request Forgery (SSRF)

  owncloud · SharePoint

  High8.5
• CVE-2025-53827

  ownCloud Core: Updater has an exposed dangerous method or function

  owncloud · ownCloud Core

  Critical9.1
• CVE-2019-25337

  OwnCloud 8.1.8 - Username Disclosure

  OwnCloud · OwnCloud

  Medium5.3
• CVE-2023-23948

  ownCloud Android app vulnerable to SQL Injection

  ownCloud · Android

  Medium6.2
• CVE-2023-24804

  ownCloud Android app vulnerable to Path Traversal

  ownCloud · Android

  Medium5.0
• CVE-2013-0203

  Multiple cross-site scripting (XSS) vulnerabilities in ownCloud 4.5.5, 4.0.10, and earlier allow remote attackers to inject arbitrary web script or HTML via…

  ownCloud · ownCloud Server

  Medium5.4
• CVE-2013-0202

  Cross-site scripting (XSS) vulnerability in ownCloud 4.5.5, 4.0.10, and earlier allows remote attackers to inject arbitrary web script or HTML via the action…

  ownCloud · ownCloud

  Medium6.1