cve.bz

CVE-2016-1499

8.5 highEPSS 3.5%

ownCloud Server before 8.0.10, 8.1.x before 8.1.5, and 8.2.x before 8.2.2 allow remote authenticated users to obtain sensitive information from a directory listing and possibly cause a denial of service (CPU consumption) via the force parameter to index.php/apps/files/ajax/scan.php.

Severity

CVSS 3.0

8.5 high
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:H
EPSS
3.5% chance of exploitation in the next 30 days; higher than 89% of CVEs (scores of 2026-10-31)
CWEs
CWE-200, CWE-399
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON