Vulnerability intelligence
VULONE Vulnerability Database
Stay ahead of what gets exploited. Every CVE from NVD, enriched every 30 minutes with EPSS, CISA KEV, ransomware linkage and automated analysis.
398,710CVE records
2,947Published, last 7 days
1,728In CISA KEV
1,425Critical, last 30 days
5,599Analysed
15:26 UTCLast NVD sync
Filters Show:
21 results. Onlyoffice Document Server.
Page 1 of 2| ID | Severity | Score | Technology | Weakness | CISA KEV | Exploit | EPSS | Published |
|---|---|---|---|---|---|---|---|---|
| CVE-2025-68936 | Medium | 6.1 |  Onlyoffice Document Server | Cross-site scripting | — | — | 0.20% | Dec 25, 2025 |
| CVE-2025-68935 | Medium | 6.1 | Onlyoffice Document Server | Cross-site scripting | — | — | 0.20% | Dec 25, 2025 |
| CVE-2023-46988 | Medium | 6.7 | Onlyoffice Document Server | Path traversal | — | 1 ref | 0.52% | Apr 1, 2025 |
| CVE-2023-50883 | Medium | 6.1 | Onlyoffice Document Server | Cross-site scripting | — | 1 ref | 0.61% | Sep 9, 2024 |
| CVE-2023-30188 | High | 7.5 | Onlyoffice Document Server | CWE-835 | — | 2 refs | 2.2% | Aug 14, 2023 |
| CVE-2023-30187 | Critical | 9.8 | Onlyoffice Document Server | Out-of-bounds write | — | 2 refs | 2.4% | Aug 14, 2023 |
| CVE-2023-30186 | Critical | 9.8 | Onlyoffice Document Server | Use after free | — | 2 refs | 2.3% | Aug 14, 2023 |
| CVE-2022-48422 | High | 7.8 | Onlyoffice Document Server | Uncontrolled search path element | — | 2 refs | 0.30% | Mar 19, 2023 |
| CVE-2022-29777 | Critical | 9.8 | Onlyoffice Core +1 | Out-of-bounds write | — | 2 refs | 6.9% | Jun 2, 2022 |
| CVE-2022-29776 | Critical | 9.8 | Onlyoffice Core +1 | Out-of-bounds write | — | 2 refs | 6.9% | Jun 2, 2022 |
| CVE-2022-24229 | Medium | 6.1 | Onlyoffice Document Server | Cross-site scripting | — | 2 refs | 1.9% | Apr 8, 2022 |
| CVE-2021-25833 | Critical | 9.8 | Onlyoffice Document Server | Path traversal | — | 2 refs | 44% | Mar 1, 2021 |
| CVE-2021-25832 | Critical | 9.8 | Onlyoffice Document Server | Out-of-bounds write | — | 2 refs | 13% | Mar 1, 2021 |
| CVE-2021-25831 | Critical | 9.8 | Onlyoffice Document Server | — | — | 2 refs | 12% | Mar 1, 2021 |
| CVE-2021-25830 | Critical | 9.8 | Onlyoffice Document Server | — | — | 2 refs | 12% | Mar 1, 2021 |
| CVE-2021-25829 | High | 7.5 | Onlyoffice Document Server | — | — | 2 refs | 7.4% | Mar 1, 2021 |
| CVE-2021-3199 | Critical | 9.8 | Onlyoffice Document Server | Path traversal | — | 4 refs | 8.2% | Jan 26, 2021 |
| CVE-2020-11537 | Critical | 9.8 | Onlyoffice Document Server | SQL injection | — | — | 1.5% | Apr 15, 2020 |
| CVE-2020-11536 | Critical | 9.8 | Onlyoffice Document Server | Improper input validation | — | — | 2.6% | Apr 15, 2020 |
| CVE-2020-11535 | Critical | 9.8 | Onlyoffice Document Server | XML injection | — | — | 2.3% | Apr 15, 2020 |
