CollaboraOnline

Products

Exploited and recent CVEs

• CVE-2026-46499 Medium 4.3 Collabora Online: Read-only session authorization bypass permits live document edits 0.2%
• CVE-2026-48164 Medium 4.7 Collabora Online: Reflected HTML injection through host_session_id 0.3%
• CVE-2026-23623 Medium 5.3 Collabora Online vulnerable to Authorization Bypass 0.2%
• CVE-2025-66208 High 7.2 Configuration-Dependent RCE (OS Command Injection) in richdocumentscode proxy 1.8%
• CVE-2025-27791 High 8.3 Collabora Online Vulnerable to Arbitrary File Write 0.5%
• CVE-2025-24796 Medium 6.3 Remote Code Execution within Collabora Online jail with Macros Enabled 0.5%
• CVE-2024-45045 Medium 6.3 JavaScript Injection via url encoded values in links in Collabora Office Android 0.3%
• CVE-2024-37311 High 8.2 Collabora Online's remote host TLS certificates are not fully verified 0.2%
• CVE-2024-29182 Medium 6.1 Collabora Online Stored Cross-Site-Scripting vulnerability via tooltip 0.3%
• CVE-2024-25114 Low 2.6 Sensitive Information Disclosure (JailID) to users in Collabora Online 0.5%
• CVE-2023-49782 High 7.1 Cross-Site-Scripting vulnerability in error message passing in richdocumentscode 0.4%
• CVE-2023-49788 High 7.2 Improper handling of browser-side provided input in richdocuments path handling 0.5%
• CVE-2023-48314 High 7.1 Unescaped passing of the request URL in Collabora Online 0.4%
• CVE-2023-34088 High 8.7 Collabora Online has Stored Cross-Site-Scripting vulnerability in admin interface 0.4%
• CVE-2023-31145 Medium 4.3 Reflected XSS vulnerability in CollaboraOnline 0.4%
• CVE-2021-43817 High 8.2 Reflected Cross-Site-Scripting vulnerability in Collabora Online 0.7%
• CVE-2021-32745 High 7.3 Reflected Cross-Site-Scripting vulnerability 0.6%
• CVE-2021-32744 Critical 9.8 Unauthenticated attacker could gain access to currently open files 1.1%