How many Ascensio System SIA OnlyOffice CVEs are in CISA KEV?

None of Ascensio System SIA OnlyOffice's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Ascensio System SIA OnlyOffice are affected?

8 distinct Ascensio System SIA OnlyOffice versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Ascensio System SIA OnlyOffice CVEs?

Ascensio System SIA OnlyOffice's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).

What is the average severity of Ascensio System SIA OnlyOffice CVEs?

The average CVSS base score across Ascensio System SIA OnlyOffice's scored CVEs is 5.1.

RadicalNotion.AI

Log in Start free

Ascensio System SIA

2 CVEs

Ascensio System SIA OnlyOffice Vulnerabilities

Name: Ascensio System SIA OnlyOffice vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for OnlyOffice by Ascensio System SIA.

2

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

2

Public exploits

PoC or exploit code

5.1

Avg CVSS

2025–2025

Last updated September 11, 2025

Overview

Ascensio System SIA OnlyOffice has 2 published CVE records since 2025, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 2 have a known public exploit. The average CVSS base score across scored CVEs is 5.1.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Ascensio System SIA OnlyOffice, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Ascensio System SIA OnlyOffice's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High0

Medium2

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Ascensio System SIA OnlyOffice's CVEs are currently listed in CISA's KEV catalog.

Public exploits

2

2 of Ascensio System SIA OnlyOffice's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Ascensio System SIA OnlyOffice version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

12.02 CVEs
12.12 CVEs
12.22 CVEs
12.32 CVEs
12.42 CVEs
12.52 CVEs
12.62 CVEs
12.7.02 CVEs

Find a version

2 CVEs

Sort

Ascensio System SIA OnlyOffice Comment Messages.aspx cross site scripting
CVE-2025-10255
Public exploit
CWE-79
Medium · CVSS 5.1
EPSS 0.3% (24th pct)2025-09-11
Ascensio System SIA OnlyOffice SVG Image Messages.aspx cross site scripting
CVE-2025-10254
Public exploit
CWE-79
Medium · CVSS 5.1
EPSS 0.3% (18th pct)2025-09-11

Common weakness types

The CWE weakness categories most often found in Ascensio System SIA OnlyOffice CVEs. Follow any weakness for its full explanation.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs

Other Ascensio System SIA products

Browse vulnerabilities for other products by Ascensio System SIA.

All Ascensio System SIA vulnerabilities

Frequently asked questions

Common questions about Ascensio System SIA OnlyOffice vulnerabilities.

How many CVEs does Ascensio System SIA OnlyOffice have?: Ascensio System SIA OnlyOffice has 2 published CVE records since 2025.
How many Ascensio System SIA OnlyOffice CVEs are in CISA KEV?: None of Ascensio System SIA OnlyOffice's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Ascensio System SIA OnlyOffice vulnerabilities?: Yes — 2 of Ascensio System SIA OnlyOffice's CVEs have a known public exploit.
Which versions of Ascensio System SIA OnlyOffice are affected?: 8 distinct Ascensio System SIA OnlyOffice versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Ascensio System SIA OnlyOffice CVEs?: Ascensio System SIA OnlyOffice's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).
What is the average severity of Ascensio System SIA OnlyOffice CVEs?: The average CVSS base score across Ascensio System SIA OnlyOffice's scored CVEs is 5.1.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Ascensio System SIA OnlyOffice vulnerabilities

Monitor new Ascensio System SIA OnlyOffice vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing