Section

Vulnerabilities

CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.

1 matching record, 1 with confirmed exploitation.

1. 62
   KEV CISA KEV 24d ago

   ONLYOFFICE Docs Server Path Traversal Vulnerability

   ONLYOFFICE Docs contains a path traversal vulnerability that can occur when JWT is used, via a /.. sequence in an image upload parameter and could allow for remote code execution.

   KEV · due 11 Oct 2026 (overdue) EPSS 0.30 Fix available CVE-2021-3199 ONLYOFFICE Collaboration

Same filters as JSON: /api/items?category=vuln&window=30d&vendor=ONLYOFFICE&limit=100. RSS for this section: feed.xml.