ownCloud Server (ownCloud Core) 6.0.0a

CPE Details

ownCloud Server (ownCloud Core) 6.0.0a
owncloud
owncloud_server
6.0.0a
2025-03-31
09h54 +00:00
2025-03-31
09h54 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:owncloud:owncloud_server:6.0.0a:*:*:*:*:*:*:*

Informations

Vendor

owncloud

Product

owncloud_server

Version

6.0.0a

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2014-2052 2020-02-11 14h23 +00:00 Zend Framework, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack.
9.8
Critical
CVE-2014-2050 2020-01-23 18h07 +00:00 Cross-site request forgery (CSRF) vulnerability in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2 allows remote attackers to hijack the authentication of users for requests that reset passwords via a crafted HTTP Host header.
6.5
Medium
CVE-2015-3013 2015-05-08 12h00 +00:00 ownCloud Server before 5.0.19, 6.x before 6.0.7, and 7.x before 7.0.5 allows remote authenticated users to bypass the file blacklist and upload arbitrary files via a file path with UTF-8 encoding, as demonstrated by uploading a .htaccess file.
6
The information presented on CVE Find originates from several carefully selected reference sources. CVE data is provided by MITRE Corporation and the National Vulnerability Database (NVD). The Known Exploited Vulnerabilities (KEV) catalog is sourced from the Cybersecurity and Infrastructure Security Agency (CISA), while EPSS scores come from FIRST.org. Additionally, data regarding software weaknesses (CWE) and common attack patterns (CAPEC) is maintained by MITRE Corporation, and information on hardware and software configurations (CPE) is provided by the NVD.