Vendor
ONLYOFFICE
- CVEs tracked · all time
- 2
- in CISA KEV · all time
- 1
- articles · since 11 Sep
- 4
- articles · all time
- 5
4 articles since 11 Sep; 1 CISA notice, marked below the bars.
Show as table
| Day (UTC) | Articles |
|---|---|
| Thu 8 Oct | 1 |
| Fri 9 Oct | 2 |
| Sun 11 Oct | 1 |
Products: Docs, ONLYOFFICE ownCloud integration plugin
CVEs
2 CVEsCVE-2021-3199ONLYOFFICE Docs Server Path Traversal VulnerabilityCVSS9.8CriticalExploited20%EPSS4articles
CVE-2026-84282A Server-Side Request Forgery (SSRF) vulnerability exists in the ONLYOFFICE ownCloud Integration plugin (version 9.12)CVSSUnrated–Not in KEV0.3%EPSS1article
- CISA Flags Five Exploited Flaws in China Linked Cyber CampaignSecurity Affairs
- CISA Adds Five Flaws to KEV After Flax Typhoon AttacksThe Hacker News
- CISA Flags Five Actively Exploited Flaws in Enterprise ToolsSecurityOnline
- CISA Flags Actively Exploited ONLYOFFICE Flaw That Could Enable Remote Code ExecutionCISA · official notice
- Unpatched ONLYOFFICE ownCloud Flaw Enables Internal Network ScanningSecurityOnline · first in our coverage