CVE-2021-3199

Vendor

ONLYOFFICE

Product

Docs

EPSS

0.30 (p98)

CISA KEV

added 8 Oct 2026, due 11 Oct 2026 (21d overdue)

Weakness

CWE-22

Exposure class

Collaboration, Edge / VPN / firewall, Web platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 62
   KEV CISA KEV 24d ago

   ONLYOFFICE Docs Server Path Traversal Vulnerability

   ONLYOFFICE Docs contains a path traversal vulnerability that can occur when JWT is used, via a /.. sequence in an image upload parameter and could allow for remote code execution.

   KEV · due 11 Oct 2026 (overdue) EPSS 0.30 Fix available CVE-2021-3199 ONLYOFFICE
2. 28
   CISA advisory CISA 23d ago

   Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data

   Advisory at a Glance Title Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data Original Publication October 8, 2026 Executive Summary Chinese government-linked cyber…

   CVE-2014-6278CVE-2015-3306CVE-2015-5477+5 more Microsoft Google