Approved changes feed: RSS · Atom

cpe:2.3:a:owncloud:owncloud:*:*:*:*:community:*:*:*

part: a version: * update: *

VendorOwncloud (7adb7c81-0e09-5084-ad84-9888a985e435)
ProductOwncloud (0271b5cd-a422-50b1-98fd-dfe8bea7189b)
Edition*
Language*
Software editioncommunity
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/owncloud/core purl2cpe 2026-06-01 10:16:35.629729
pkg:rpm/fedora/owncloud purl2cpe 2026-06-01 10:16:35.629731
pkg:rpm/opensuse/owncloud purl2cpe 2026-06-01 10:16:35.629733

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-3011 vulnerable 2026-06-08 05:06:36.606296 Details available
Multiple cross-site scripting (XSS) vulnerabilities in the contacts application in ownCloud Server Community Edition before 5.0.19, 6.x before 6.0.7, and 7.x before 7.0.5 allow remote authenticated users to inject arbitrary web script or HTML via a crafted contact.
Published: 2015-05-08T14:00:00.000Z
Updated: 2024-08-06T05:32:21.258Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.