GCVE - cpe:2.3:a:owncloud:owncloud_server:5.0.15:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:owncloud:owncloud_server:5.0.15:*:*:*:*:*:*:*

part: a version: 5.0.15 update: *

Vendor	Owncloud (`7adb7c81-0e09-5084-ad84-9888a985e435`)
Product	Owncloud Server (`2291c676-bc20-574c-a431-505f3752afb3`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-9048`	vulnerable	2026-06-08 05:06:10.727156	Details available The documents application in ownCloud Server 6.x before 6.0.6 and 7.x before 7.0.3 allows remote attackers to bypass the password-protection for shared files via the API. Published: 2015-02-04T18:00:00.000Z Updated: 2024-08-06T13:33:13.629Z Open on db.gcve.eu Reference links https://owncloud.org/security/advisory/?id=oc-sa-2014-024	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-9047`	vulnerable	2026-06-08 05:06:10.725818	Details available Multiple unspecified vulnerabilities in the preview system in ownCloud 6.x before 6.0.6 and 7.x before 7.0.3 allow remote attackers to read arbitrary files via unknown vectors. Published: 2015-02-04T18:00:00.000Z Updated: 2024-08-06T13:33:13.517Z Open on db.gcve.eu Reference links https://owncloud.org/security/advisory/?id=oc-sa-2014-026	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-9046`	vulnerable	2026-06-08 05:06:10.724471	Details available The OC_Util::getUrlContent function in ownCloud Server before 5.0.18, 6.x before 6.0.6, and 7.x before 7.0.3 allows remote attackers to read arbitrary files via a file:// protocol. Published: 2015-02-04T18:00:00.000Z Updated: 2024-08-06T13:33:13.561Z Open on db.gcve.eu Reference links https://owncloud.org/security/advisory/?id=oc-sa-2014-023	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-9045`	vulnerable	2026-06-08 05:06:10.723090	Details available The FTP backend in user_external in ownCloud Server before 5.0.18 and 6.x before 6.0.6 allows remote attackers to bypass intended authentication requirements via a crafted password. Published: 2015-02-04T18:00:00.000Z Updated: 2024-08-06T13:33:13.531Z Open on db.gcve.eu Reference links https://owncloud.org/security/advisory/?id=oc-sa-2014-022	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-9043`	vulnerable	2026-06-08 05:06:10.720803	Details available The user_ldap (aka LDAP user and group backend) application in ownCloud before 5.0.18, 6.x before 6.0.6, and 7.x before 7.0.3 allows remote attackers to bypass authentication via a null byte in the password and a valid user name, which triggers an unauthenticated bind. Published: 2015-02-04T18:00:00.000Z Updated: 2024-08-06T13:33:13.536Z Open on db.gcve.eu Reference links https://owncloud.org/security/advisory/?id=oc-sa-2014-020	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-9042`	vulnerable	2026-06-08 05:06:10.719363	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-9041`	vulnerable	2026-06-08 05:06:10.712279	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-4929`	vulnerable	2026-06-08 05:05:46.437824	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.