Vulnerability Database

313,825

Total vulnerabilities in the database

CVE-2015-3011

Multiple cross-site scripting (XSS) vulnerabilities in the contacts application in ownCloud Server Community Edition before 5.0.19, 6.x before 6.0.7, and 7.x before 7.0.5 allow remote authenticated users to inject arbitrary web script or HTML via a crafted contact.

Published: May 8, 2015
Updated: Nov 9, 2025
CVE: CVE-2015-3011
Severity: Low
Exploit:

CVSS v2:

Severity: Low
Score: 3.5
AV:N/AC:M/Au:S/C:N/I:P/A:N

CWEs:

CWE-79

OWASP TOP 10:

A7 - Cross-Site Scripting (XSS)

Affected Software
References

Software	From	Fixed in
owncloud / owncloud	-	5.0.18.x
owncloud / owncloud	-	7.0.4.x
owncloud / owncloud	-	6.0.6.x
debian / debian_linux	7.0	7.0.x

http://www.debian.org/security/2015/dsa-3244
http://www.securityfocus.com/bid/74445
https://owncloud.org/security/advisory/?id=oc-sa-2015-001

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo