Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:nextcloud_server:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorN/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78)
ProductNextcloud Server (a9fa5c40-8760-5f7b-be87-88a1911a1f8f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-22915 vulnerable 2026-06-08 05:30:01.856757 Details available
Nextcloud server before 19.0.11, 20.0.10, 21.0.2 is vulnerable to brute force attacks due to lack of inclusion of IPv6 subnets in rate-limiting considerations. This could potentially result in an attacker bypassing rate-limit controls such as the Nextcloud brute-force protection.
Published: 2021-06-11T15:49:38.000Z
Updated: 2024-08-03T18:58:25.888Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-22878 vulnerable 2026-06-08 05:30:01.690633 Details available
Nextcloud Server prior to 20.0.6 is vulnerable to reflected cross-site scripting (XSS) due to lack of sanitization in `OC.Notification.show`.
Published: 2021-03-03T17:39:51.000Z
Updated: 2024-08-03T18:51:07.563Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-22877 vulnerable 2026-06-08 05:30:01.689110 Details available
A missing user check in Nextcloud prior to 20.0.6 inadvertently populates a user's own credentials for other users external storage configuration when not already configured yet.
Published: 2021-03-03T17:39:15.000Z
Updated: 2024-08-03T18:51:07.530Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8296 vulnerable 2026-06-08 05:27:15.564193 Details available
Nextcloud Server prior to 20.0.0 stores passwords in a recoverable format even when external storage is not configured.
Published: 2021-03-03T17:40:33.000Z
Updated: 2024-08-04T09:56:28.293Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8295 vulnerable 2026-06-08 05:27:15.563838 Details available
A wrong check in Nextcloud Server 19 and prior allowed to perform a denial of service attack when resetting the password for a user.
Published: 2021-01-26T17:10:36.000Z
Updated: 2024-08-04T09:56:28.330Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8294 vulnerable 2026-06-08 05:27:15.563455 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8293 vulnerable 2026-06-08 05:27:15.562938 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8259 vulnerable 2026-06-08 05:27:15.438759 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8236 vulnerable 2026-06-08 05:27:15.356180 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8223 vulnerable 2026-06-08 05:27:15.306125 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8183 vulnerable 2026-06-08 05:27:15.114244 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8173 vulnerable 2026-06-08 05:27:15.072528 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8155 vulnerable 2026-06-08 05:27:14.971683 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8154 vulnerable 2026-06-08 05:27:14.971087 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8152 vulnerable 2026-06-08 05:27:14.967482 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8150 vulnerable 2026-06-08 05:27:14.964884 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8139 vulnerable 2026-06-08 05:27:14.945341 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8138 vulnerable 2026-06-08 05:27:14.944840 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8133 vulnerable 2026-06-08 05:27:14.935777 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8122 vulnerable 2026-06-08 05:27:14.845649 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8121 vulnerable 2026-06-08 05:27:14.845189 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8120 vulnerable 2026-06-08 05:27:14.842949 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8119 vulnerable 2026-06-08 05:27:14.842343 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8118 vulnerable 2026-06-08 05:27:14.840076 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8117 vulnerable 2026-06-08 05:27:14.838363 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-5449 vulnerable 2026-06-08 05:13:59.174978 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15624 vulnerable 2026-06-08 05:12:57.702491 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15623 vulnerable 2026-06-08 05:12:57.702083 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15621 vulnerable 2026-06-08 05:12:57.701249 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15619 vulnerable 2026-06-08 05:12:57.695193 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15618 vulnerable 2026-06-08 05:12:57.694839 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15617 vulnerable 2026-06-08 05:12:57.694505 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15616 vulnerable 2026-06-08 05:12:57.694048 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15613 vulnerable 2026-06-08 05:12:57.689706 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15612 vulnerable 2026-06-08 05:12:57.688320 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-16467 vulnerable 2026-06-08 05:11:04.893175 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-16466 vulnerable 2026-06-08 05:11:04.892665 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-16465 vulnerable 2026-06-08 05:11:04.892317 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-16464 vulnerable 2026-06-08 05:11:04.891964 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-16463 vulnerable 2026-06-08 05:11:04.886784 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.