Owncloud Owncloud Client — known CVE vulnerabilities

Every CVE whose affected-product data names Owncloud Owncloud Client, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2022-25338 — CVSS 6.8 (medium): ownCloud owncloud/android before 2.20 has Incorrect Access Control for physically proximate attackers.
• CVE-2023-23948 — CVSS 6.2 (medium): The ownCloud Android app allows ownCloud users to access, share, and edit files and folders. Version 2.21.1 of the ownCloud Android app is…
• CVE-2020-36250 — CVSS 6.1 (medium): In the ownCloud application before 2.15 for Android, the lock protection mechanism can be bypassed by moving the system date/time into the…
• CVE-2022-25339 — CVSS 5.5 (medium): ownCloud owncloud/android 2.20 has Incorrect Access Control for local attackers.
• CVE-2015-5955 — CVSS 5.0 (medium): ownCloud iOS app before 3.4.4 does not properly switch state between multiple instances, which might allow remote instance administrators…
• CVE-2023-24804 — CVSS 5.0 (medium): The ownCloud Android app allows ownCloud users to access, share, and edit files and folders. Prior to version 3.0, the app has an…
• CVE-2020-36248 — CVSS 3.9 (low): The ownCloud application before 2.15 for Android allows attackers to use adb to include a PIN preferences value in a backup archive, and…