How many nextcloud nextcloud server CVEs are in CISA KEV?

None of nextcloud nextcloud server's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for nextcloud nextcloud server vulnerabilities?

Yes — 13 of nextcloud nextcloud server's CVEs have a known public exploit.

Which versions of nextcloud nextcloud server are affected?

578 distinct nextcloud nextcloud server versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in nextcloud nextcloud server CVEs?

nextcloud nextcloud server's CVEs most often map to these CWE weakness types: CWE-284 (Improper Access Control), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-287 (Improper Authentication), CWE-307 (Improper Restriction of Excessive Authentication Attempts).

How many critical nextcloud nextcloud server vulnerabilities are there?

nextcloud nextcloud server has 8 critical and 43 high-severity CVEs.

What is the average severity of nextcloud nextcloud server CVEs?

The average CVSS base score across nextcloud nextcloud server's scored CVEs is 6.0.

nextcloud server Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

nextcloud server has 189 published CVE records since 2016, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 13 have a known public exploit. The average CVSS base score across scored CVEs is 6.0.

This page aggregates every publicly disclosed vulnerability (CVE) affecting nextcloud server, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of nextcloud server's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical8

High43

Medium125

Low13

In CISA’s Known Exploited Vulnerabilities catalog

None of nextcloud server's CVEs are currently listed in CISA's KEV catalog.

Public exploits

13 of nextcloud server's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every nextcloud server version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 19.0.1311 CVEs
20.0.0 <= v < 20.0.1111 CVEs
21.0.0 <= v < 21.0.311 CVEs
27.0.0 <= v <= 27.0.08 CVEs
25.0.0 <= v < 25.0.47 CVEs
< 19.0.116 CVEs
>= All versions before 9.0.55 and 10.0.26 CVEs
20.0.0 <= v < 20.0.106 CVEs
21.0.0 <= v < 21.0.26 CVEs
24.0.0 <= v < 24.0.106 CVEs
25.0.0 <= v < 25.0.96 CVEs

Frequently asked questions

Common questions about nextcloud server vulnerabilities.

How many CVEs does nextcloud nextcloud server have?: nextcloud nextcloud server has 189 published CVE records since 2016.
How many nextcloud nextcloud server CVEs are in CISA KEV?: None of nextcloud nextcloud server's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for nextcloud nextcloud server vulnerabilities?: Yes — 13 of nextcloud nextcloud server's CVEs have a known public exploit.
Which versions of nextcloud nextcloud server are affected?: 578 distinct nextcloud nextcloud server versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in nextcloud nextcloud server CVEs?: nextcloud nextcloud server's CVEs most often map to these CWE weakness types: CWE-284 (Improper Access Control), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-287 (Improper Authentication), CWE-307 (Improper Restriction of Excessive Authentication Attempts).
How many critical nextcloud nextcloud server vulnerabilities are there?: nextcloud nextcloud server has 8 critical and 43 high-severity CVEs.
What is the average severity of nextcloud nextcloud server CVEs?: The average CVSS base score across nextcloud nextcloud server's scored CVEs is 6.0.

nextcloud server Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Version ranges

Common weakness types

Disclosure activity by year

Other nextcloud products

Frequently asked questions

References

Track nextcloud server vulnerabilities

Fixed in