Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Arbitrary File Creation Arbitrary File Read Arbitrary File Write Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial-of-service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilitie Known Vulnerabilities Ldap Injection Malware Missing Update Path Traversal Privilege Escalation Remote Code Execution SSRF SSTI Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity osTicket Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-4271) CVE-2022-4271 CWE-707 CWE-707 Medium osTicket Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-32074) CVE-2022-32074 CWE-707 CWE-707 Medium osTicket Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-1315) CVE-2023-1315 CWE-707 CWE-707 Medium osTicket Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-1316) CVE-2023-1316 CWE-707 CWE-707 Medium osTicket Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-1317) CVE-2023-1317 CWE-707 CWE-707 Medium osTicket Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-1318) CVE-2023-1318 CWE-707 CWE-707 Medium osTicket Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-1319) CVE-2023-1319 CWE-707 CWE-707 Medium osTicket Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-1320) CVE-2023-1320 CWE-707 CWE-707 Medium osTicket Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-27148) CVE-2023-27148 CWE-707 CWE-707 Medium osTicket Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-27149) CVE-2023-27149 CWE-707 CWE-707 Medium osTicket Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2021-45811) CVE-2021-45811 CWE-138 CWE-138 Medium osTicket Integer Overflow or Wraparound Vulnerability (CVE-2018-7194) CVE-2018-7194 CWE-190 CWE-190 Medium osTicket Other Vulnerability (CVE-2005-1436) CVE-2005-1436 Medium Overly long session timeout in servlet configuration CWE-16 CWE-16 Medium ownCloud Credentials Management Errors Vulnerability (CVE-2012-5607) CVE-2012-5607 Medium ownCloud Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2012-2397) CVE-2012-2397 CWE-352 CWE-352 Medium ownCloud Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2012-4391) CVE-2012-4391 CWE-352 CWE-352 Medium ownCloud Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2012-4393) CVE-2012-4393 CWE-352 CWE-352 Medium ownCloud Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2012-4753) CVE-2012-4753 CWE-352 CWE-352 Medium ownCloud Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2013-0299) CVE-2013-0299 CWE-352 CWE-352 Medium ownCloud Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2013-0300) CVE-2013-0300 CWE-352 CWE-352 Medium ownCloud Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2013-0301) CVE-2013-0301 CWE-352 CWE-352 Medium ownCloud Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-2050) CVE-2014-2050 CWE-352 CWE-352 Medium ownCloud Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-3836) CVE-2014-3836 CWE-352 CWE-352 Medium ownCloud Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-9041) CVE-2014-9041 CWE-352 CWE-352 Medium ownCloud Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-28644) CVE-2020-28644 CWE-352 CWE-352 Medium Owncloud Cross-site Scripting (XSS) Vulnerability (CVE-2020-16255) CVE-2020-16255 Medium ownCloud Cryptographic Issues Vulnerability (CVE-2013-1941) CVE-2013-1941 Medium ownCloud CVE-2013-0302 Vulnerability (CVE-2013-0302) CVE-2013-0302 Medium ownCloud CVE-2013-0303 Vulnerability (CVE-2013-0303) CVE-2013-0303 Medium ownCloud CVE-2013-7344 Vulnerability (CVE-2013-7344) CVE-2013-7344 Medium ownCloud CVE-2014-9047 Vulnerability (CVE-2014-9047) CVE-2014-9047 Medium ownCloud CVE-2017-9339 Vulnerability (CVE-2017-9339) CVE-2017-9339 Medium ownCloud CVE-2017-9340 Vulnerability (CVE-2017-9340) CVE-2017-9340 Medium ownCloud CVE-2022-43679 Vulnerability (CVE-2022-43679) CVE-2022-43679 Medium ownCloud Exposure of Resource to Wrong Sphere Vulnerability (CVE-2020-36252) CVE-2020-36252 CWE-668 CWE-668 Medium ownCloud Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-4390) CVE-2012-4390 CWE-200 CWE-200 Medium ownCloud Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2013-2086) CVE-2013-2086 CWE-200 CWE-200 Medium ownCloud Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-5341) CVE-2014-5341 CWE-200 CWE-200 Medium ownCloud Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-9044) CVE-2014-9044 CWE-200 CWE-200 Medium ownCloud Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-9046) CVE-2014-9046 CWE-200 CWE-200 Medium ownCloud Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-9049) CVE-2014-9049 CWE-200 CWE-200 Medium ownCloud Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-1501) CVE-2016-1501 CWE-200 CWE-200 Medium ownCloud Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-5866) CVE-2017-5866 CWE-200 CWE-200 Medium ownCloud Files or Directories Accessible to External Parties Vulnerability (CVE-2015-4715) CVE-2015-4715 CWE-552 CWE-552 Medium ownCloud Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2021-35947) CVE-2021-35947 CWE-209 CWE-209 Medium ownCloud Improper Access Control Vulnerability (CVE-2016-9460) CVE-2016-9460 CWE-284 CWE-284 Medium ownCloud Improper Access Control Vulnerability (CVE-2016-9461) CVE-2016-9461 CWE-284 CWE-284 Medium ownCloud Improper Access Control Vulnerability (CVE-2016-9462) CVE-2016-9462 CWE-284 CWE-284 Medium ownCloud Improper Access Control Vulnerability (CVE-2016-9467) CVE-2016-9467 CWE-284 CWE-284 Medium ownCloud Improper Access Control Vulnerability (CVE-2016-9468) CVE-2016-9468 CWE-284 CWE-284 Medium ownCloud Improper Authentication Vulnerability (CVE-2014-2047) CVE-2014-2047 CWE-287 CWE-287 Medium ownCloud Improper Authentication Vulnerability (CVE-2014-9043) CVE-2014-9043 CWE-287 CWE-287 Medium ownCloud Improper Authentication Vulnerability (CVE-2014-9045) CVE-2014-9045 CWE-287 CWE-287 Medium ownCloud Improper Authentication Vulnerability (CVE-2020-10254) CVE-2020-10254 CWE-287 CWE-287 Medium ownCloud Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2013-0204) CVE-2013-0204 CWE-94 CWE-94 Medium ownCloud Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2013-1850) CVE-2013-1850 CWE-94 CWE-94 Medium ownCloud Improper Input Validation Vulnerability (CVE-2012-2270) CVE-2012-2270 CWE-20 CWE-20 Medium ownCloud Improper Input Validation Vulnerability (CVE-2012-5336) CVE-2012-5336 CWE-20 CWE-20 Medium ownCloud Improper Input Validation Vulnerability (CVE-2012-5610) CVE-2012-5610 CWE-20 CWE-20 Medium ownCloud Improper Input Validation Vulnerability (CVE-2013-1939) CVE-2013-1939 CWE-20 CWE-20 Medium ownCloud Improper Input Validation Vulnerability (CVE-2013-2044) CVE-2013-2044 CWE-20 CWE-20 Medium ownCloud Improper Input Validation Vulnerability (CVE-2014-2585) CVE-2014-2585 CWE-20 CWE-20 Medium ownCloud Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2013-2039) CVE-2013-2039 CWE-22 CWE-22 Medium ownCloud Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2013-2085) CVE-2013-2085 CWE-22 CWE-22 Medium ownCloud Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2014-4929) CVE-2014-4929 CWE-22 CWE-22 Medium ownCloud Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2023-24804) CVE-2023-24804 CWE-22 CWE-22 Medium ownCloud Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-2269) CVE-2012-2269 CWE-707 CWE-707 Medium ownCloud Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-2398) CVE-2012-2398 CWE-707 CWE-707 Medium ownCloud Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-4394) CVE-2012-4394 CWE-707 CWE-707 Medium ownCloud Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-4395) CVE-2012-4395 CWE-707 CWE-707 Medium ownCloud Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-4396) CVE-2012-4396 CWE-707 CWE-707 Medium ownCloud Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-4397) CVE-2012-4397 CWE-707 CWE-707 Medium ownCloud Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-5056) CVE-2012-5056 CWE-707 CWE-707 Medium ownCloud Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-5606) CVE-2012-5606 CWE-707 CWE-707 Medium 1...72737475...107 73 / 107
