Skip to contentCollaboraonline Online vulnerabilities
- collaboraonline onlineCollabora Online: Read-only session authorization bypass permits live document editsCVE-2026-464994.3 Medium
- collaboraonline onlineCollabora Online: Reflected HTML injection through host_session_idCVE-2026-481644.7 Medium
- collaboraonline onlineCollabora Online vulnerable to Authorization BypassCVE-2026-236235.3 Medium
- collabora online - built-in code server, collaboraonline online +1 moreConfiguration-Dependent RCE (OS Command Injection) in richdocumentscode proxyCVE-2025-662087.2 High
- collaboraonline onlineCollabora Online Vulnerable to Arbitrary File WriteCVE-2025-277918.3 High
- collaboraonline onlineRemote Code Execution within Collabora Online jail with Macros EnabledCVE-2025-247966.3 Medium
- collabora onlineJavaScript Injection via url encoded values in links in Collabora Office AndroidCVE-2024-450456.3 Medium
- collaboraonline onlineCollabora Online's remote host TLS certificates are not fully verifiedCVE-2024-373118.2 High
- collaboraoffice collabora online, collaboraonline online +1 moreCollabora Online Stored Cross-Site-Scripting vulnerability via tooltipCVE-2024-291826.1 Medium
- collabora onlineSensitive Information Disclosure (JailID) to users in Collabora OnlineCVE-2024-251142.6 Low
- collaboraoffice richdocumentscode, collaboraonline online +1 moreCross-Site-Scripting vulnerability in error message passing in richdocumentscodeCVE-2023-497827.1 High
- collaboraoffice richdocumentscode, collaboraonline online +1 moreImproper handling of browser-side provided input in richdocuments path handlingCVE-2023-497887.2 High
- collaboraoffice collabora online, collaboraonline online +1 moreUnescaped passing of the request URL in Collabora OnlineCVE-2023-483147.1 High
- collaboraoffice collabora online, collaboraonline online +1 moreCollabora Online has Stored Cross-Site-Scripting vulnerability in admin interfaceCVE-2023-340888.7 High
- collabora onlineReflected XSS vulnerability in CollaboraOnlineCVE-2023-311454.3 Medium
- collabora onlineReflected Cross-Site-Scripting vulnerability in Collabora OnlineCVE-2021-438178.2 High
- collabora onlineReflected Cross-Site-Scripting vulnerabilityCVE-2021-327457.3 High
- collabora onlineUnauthenticated attacker could gain access to currently open filesCVE-2021-327449.8 Critical