CO
Vendor
Collaboraoffice
7
CVEs
0
On KEV
0
New 30D
Products
CO6.1
Collabora Online
Collaboraoffice
3 CVEs0 on KEV0 new
RI7.2
Richdocumentscode
Collaboraoffice
2 CVEs0 on KEV0 new
CO6.1
Collabora Online Development Edition
Collaboraoffice
1 CVEs0 on KEV0 new
ON7.8
Online
Collaboraoffice
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-29182 | CO Collabora Online Collaboraoffice | 6.1 | Apr 4 | Collabora Online Stored Cross-Site-Scripting vulnerability via tooltip |
| CVE-2023-49782 | RI Richdocumentscode Collaboraoffice | 6.1 | Dec 8 | Cross-Site-Scripting vulnerability in error message passing in richdocumentscode |
| CVE-2023-49788 | RI Richdocumentscode Collaboraoffice | 7.2 | Dec 8 | Improper handling of browser-side provided input in richdocuments path handling |
| CVE-2023-48314 | CO Collabora Online Collaboraoffice | 6.1 | Dec 1 | Unescaped passing of the request URL in Collabora Online |
| CVE-2023-34088 | CO Collabora Online Collaboraoffice | 5.4 | May 31 | Collabora Online has Stored Cross-Site-Scripting vulnerability in admin interface |
| CVE-2021-25630 | ON Online Collaboraoffice | 7.8 | Feb 23 | "loolforkit" is a privileged program that is supposed to be run by a special, non-privileged "lool" user |
| CVE-2020-12432 | CO Collabora Online Development Edition Collaboraoffice | 6.1 | Jul 21 | The WOPI API integration for Vereign Collabora CODE through 4.2.2 does not properly restrict delivery of JavaScript to a victim's browser, and lacks proper MIME type access… |