kiteworks owncloud vulnerabilities, newest first
Filter
By year: all 2026 2025 2024 2023 2022 2021
- 9.8CVE-2026-84473EPSS 0.5%
Authentication Bypass / Missing Brute-Force Protection in remote.php/webdav/ in ownCloud ownCloud server 10.16.3 allows an unauthenticated remote attacker to perform unlimited online password guessing against WebDAV accounts via repeated H…
- 6.8CVE-2023-7273EPSS 0.2%
Cross site request forgery in Kiteworks OwnCloud allows an unauthenticated attacker to forge requests. If a request has no Authorization header, it is created with an empty string as value by a rewrite rule. The CSRF check is done by compa…