# Owncloud Owncloud Server


- [CVE-2023-49105](https://insights.sbomify.com/CVE-2023-49105/): ownCloud Improper Authentication (critical 9.8, exploited in the wild)
- [CVE-2015-4716](https://insights.sbomify.com/CVE-2015-4716/): Path traversal in n/a (critical 10.0)
- [CVE-2014-2052](https://insights.sbomify.com/CVE-2014-2052/): XML external entity in n/a (critical 9.8)
- [CVE-2015-7699](https://insights.sbomify.com/CVE-2015-7699/): Code injection in n/a (critical 9.0)
- [CVE-2015-4718](https://insights.sbomify.com/CVE-2015-4718/): Command injection in n/a (critical 9.0)
- [CVE-2016-1499](https://insights.sbomify.com/CVE-2016-1499/): Information disclosure in n/a (high 8.5)
- [CVE-2015-4717](https://insights.sbomify.com/CVE-2015-4717/): Denial of service in n/a (high 7.8)
- [CVE-2015-6500](https://insights.sbomify.com/CVE-2015-6500/): Path traversal in n/a (high 7.5)
- [CVE-2014-2044](https://insights.sbomify.com/CVE-2014-2044/): File upload in n/a (high 7.5)
- [CVE-2014-2051](https://insights.sbomify.com/CVE-2014-2051/): Code injection in n/a (high 7.5)
- [CVE-2014-2053](https://insights.sbomify.com/CVE-2014-2053/): getID3 is vulnerable to XML External Entity (XXE) (high 7.5)
- [CVE-2014-2054](https://insights.sbomify.com/CVE-2014-2054/): PHPExcel vulnerable to XXE attacks through libxml (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/products/owncloud/owncloud-server/