Vulnerability Database

300,445

Total vulnerabilities in the database

CVE-2019-15623

Exposure of Private Information in Nextcloud Server 16.0.1 causes the server to send it's domain and user IDs to the Nextcloud Lookup Server without any further data when the Lookup server is disabled.

  • Published: Feb 4, 2020
  • Updated: Nov 9, 2025
  • CVE: CVE-2019-15623
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.3
  • AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:P/I:N/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
nextcloud / nextcloud_server 16.0.0 16.0.2
nextcloud / nextcloud_server 15.0.0 15.0.9
nextcloud / nextcloud_server - 14.0.13
opensuse / backports_sle 15.0-sp1 15.0-sp1.x