[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fWzklm6qQRpDcohS00X0Ym2F3LK4pveIrlaZ4BP7AlBE":3,"g5a-ex:onlyoffice\u002Fserver@*":77,"g5a-family:onlyoffice\u002Fserver":79},{"success":4,"data":5},true,{"product":6,"versions":18,"topVulnerabilitiesByEpss":20,"kevVulnerabilities":54,"seoMetadata":55,"meta":74},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":17},"onlyoffice","server",1,6,0,"2023-01-23",[14],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"7.0.0.49",false,"Server by Onlyoffice is a technology product with 1 tracked version and 6 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[19],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},[21,28,34,39,43,49],{"cveId":22,"description":23,"publishedDate":12,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":16,"epssScore":27},"CVE-2021-43445","ONLYOFFICE all versions as of 2021-11-08 is affected by Incorrect Access Control. An attacker can authenticate with the web socket service of the ONLYOFFICE document editor which is protected by JWT auth by using a default JWT signing key.",9.8,"v3.1","Critical",0.01707,{"cveId":29,"description":30,"publishedDate":12,"cvssScore":31,"cvssVersion":25,"severity":32,"isKev":16,"epssScore":33},"CVE-2021-43447","ONLYOFFICE all versions as of 2021-11-08 is affected by Incorrect Access Control. An authentication bypass in the document editor allows attackers to edit documents without authentication.",7.5,"High",0.01254,{"cveId":35,"description":36,"publishedDate":12,"cvssScore":37,"cvssVersion":25,"severity":32,"isKev":16,"epssScore":38},"CVE-2021-43449","ONLYOFFICE all versions as of 2021-11-08 is vulnerable to Server-Side Request Forgery (SSRF). The document editor service can be abused to read and serve arbitrary URLs as a document.",8.1,0.01249,{"cveId":40,"description":41,"publishedDate":12,"cvssScore":31,"cvssVersion":25,"severity":32,"isKev":16,"epssScore":42},"CVE-2021-43444","ONLYOFFICE all versions as of 2021-11-08 is affected by Incorrect Access Control. Signed document download URLs can be forged due to a weak default URL signing key.",0.012,{"cveId":44,"description":45,"publishedDate":12,"cvssScore":46,"cvssVersion":25,"severity":47,"isKev":16,"epssScore":48},"CVE-2021-43448","ONLYOFFICE all versions as of 2021-11-08 is vulnerable to Improper Input Validation. A lack of input validation can allow an attacker to spoof the names of users who interact with a document, if the document id is known.",5.3,"Medium",0.01012,{"cveId":50,"description":51,"publishedDate":12,"cvssScore":52,"cvssVersion":25,"severity":47,"isKev":16,"epssScore":53},"CVE-2021-43446","ONLYOFFICE all versions as of 2021-11-08 is vulnerable to Cross Site Scripting (XSS). The \"macros\" feature of the document editor allows malicious cross site scripting payloads to be used.",6.1,0.00824,[],{"title":56,"metaDescription":57,"keywords":58,"structuredData":59},"Server by Onlyoffice - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Server by Onlyoffice covering 1 version with 6 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Server vulnerabilities, Server security, Server CVE, Onlyoffice Server, Server threat intelligence, Onlyoffice security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":60,"@type":61,"name":62,"description":57,"url":63,"manufacturer":64,"applicationCategory":68,"softwareVersion":69,"mainEntity":70},"https:\u002F\u002Fschema.org","SoftwareApplication","Server","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fonlyoffice\u002Fserver",{"@type":65,"name":66,"url":67},"Organization","Onlyoffice","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fonlyoffice","Security Software","1 versions tracked",{"@type":71,"name":72,"description":73,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Server Security Vulnerabilities","Security vulnerabilities affecting Server by Onlyoffice",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":75,"apiVersion":76},"2026-10-18T12:27:16.967Z","3.0",{"rows":78,"total":11,"capped":16,"failed":11},[],[]]