Collabora kayıtları
collabora üreticisine ait 7 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %14,3
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-639 Authorization Bypass Through User-Controlled Key1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
- CWE-84 Improper Neutralization of Encoded URI Schemes in a Web Page1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
7 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
30İzleyin | CVE-2021-32744İstismar yok | Unauthenticated attacker could gain access to currently open filescollabora · online · CWE-639 | Yüksek7,5 | — | %1,1 | 21 Tem 2021 |
28İzleyin | CVE-2025-66208İstismar yok | Configuration-Dependent RCE (OS Command Injection) in richdocumentscode proxycollabora · online · CWE-78 | Yüksek7,2 | — | %1,1 | 3 Ara 2025 |
24İzleyin | CVE-2021-43817İstismar yok | Reflected Cross-Site-Scripting vulnerability in Collabora Onlinecollabora · online · CWE-79 | Orta6,1 | — | %0,6 | 13 Ara 2021 |
24İzleyin | CVE-2021-32745İstismar yok | Reflected Cross-Site-Scripting vulnerabilitycollabora · online · CWE-79 | Orta6,1 | — | %0,6 | 21 Tem 2021 |
24İzleyin | CVE-2023-31145İstismar yok | Reflected XSS vulnerability in CollaboraOnlinecollabora · online · CWE-79 | Orta6,1 | — | %0,4 | 15 May 2023 |
24İzleyin | CVE-2024-45045İstismar yok | JavaScript Injection via url encoded values in links in Collabora Office Androidcollabora · online · CWE-84 | Orta6,1 | — | %0,3 | 29 Ağu 2024 |
21İzleyin | CVE-2024-25114İstismar yok | Sensitive Information Disclosure (JailID) to users in Collabora Onlinecollabora · online · CWE-200 | Orta5,3 | — | %0,5 | 11 Mar 2024 |
- CVE-2021-3274430İzleyin
Unauthenticated attacker could gain access to currently open files
YüksekCVSS 7,5İstismar yokEPSS %1collabora · online21 Tem 2021
- CVE-2025-6620828İzleyin
Configuration-Dependent RCE (OS Command Injection) in richdocumentscode proxy
YüksekCVSS 7,2İstismar yokEPSS %1collabora · online3 Ara 2025
- CVE-2021-4381724İzleyin
Reflected Cross-Site-Scripting vulnerability in Collabora Online
OrtaCVSS 6,1İstismar yokEPSS %1collabora · online13 Ara 2021
- CVE-2021-3274524İzleyin
Reflected Cross-Site-Scripting vulnerability
OrtaCVSS 6,1İstismar yokEPSS %1collabora · online21 Tem 2021
- CVE-2023-3114524İzleyin
Reflected XSS vulnerability in CollaboraOnline
OrtaCVSS 6,1İstismar yokEPSS %0collabora · online15 May 2023
- CVE-2024-4504524İzleyin
JavaScript Injection via url encoded values in links in Collabora Office Android
OrtaCVSS 6,1İstismar yokEPSS %0collabora · online29 Ağu 2024
- CVE-2024-2511421İzleyin
Sensitive Information Disclosure (JailID) to users in Collabora Online
OrtaCVSS 5,3İstismar yokEPSS %0collabora · online11 Mar 2024