CVE Intelligence

OwnCloud OwnCloud vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting OwnCloud OwnCloud: 1 record(s), with affected versions and fixes.

CVE-2019-25337 Critical · 9.8 CWE-203 Feb 12, 2026
OwnCloud 8.1.8 - Username Disclosure
OwnCloud 8.1.8 contains a username enumeration vulnerability that allows remote attackers to discover user accounts by manipulating the share.php endpoint. Attackers can send crafted GET requests to /index.php/core/ajax/share.php with a wildcard search parameter to retrieve comprehensive user information.