CVE-2014-2049

MEDIUM 5.0CVE-2014-2049 · Published 14/03/2014 · updated 17/06/2026

In short

CVE-2014-2049 is a MEDIUM (CVSS 5.0) vulnerability affecting owncloud (owncloud), owncloud server (owncloud).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 69.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
owncloud owncloud	`≤ 5.0.14`	No fix yet
owncloud server owncloud	`= 3.0.0= 3.0.1= 3.0.2= 3.0.3= 4.0.0= 4.0.1= 4.0.10= 4.0.11= 4.0.12= 4.0.13= 4.0.14= 4.0.15= 4.0.16= 4.0.2= 4.0.3= 4.0.4= 4.0.5= 4.0.6= 4.0.7= 4.0.8= 4.0.9= 4.5.0= 4.5.1= 4.5.10= 4.5.11= 4.5.12= 4.5.13= 4.5.2= 4.5.3= 4.5.4= 4.5.5= 4.5.6= 4.5.7= 4.5.8= 4.5.9= 5.0.0= 5.0.1= 5.0.10= 5.0.11= 5.0.12= 5.0.13= 5.0.2= 5.0.3= 5.0.4= 5.0.5= 5.0.6= 5.0.7= 5.0.8= 5.0.9= 6.0.0= 6.0.1`	No fix yet

Description

The default Flash Cross Domain policies in ownCloud before 5.0.15 and 6.x before 6.0.2 allows remote attackers to access user files via unspecified vectors.

References

owncloud.org/about/security/advisories/oC-SA-2014-003 · Patch

More vulnerabilities in owncloud

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

owncloud

≤ 5.0.14

No fix yet

owncloud server

owncloud

= 3.0.0= 3.0.1= 3.0.2= 3.0.3= 4.0.0= 4.0.1= 4.0.10= 4.0.11= 4.0.12= 4.0.13= 4.0.14= 4.0.15= 4.0.16= 4.0.2= 4.0.3= 4.0.4= 4.0.5= 4.0.6= 4.0.7= 4.0.8= 4.0.9= 4.5.0= 4.5.1= 4.5.10= 4.5.11= 4.5.12= 4.5.13= 4.5.2= 4.5.3= 4.5.4= 4.5.5= 4.5.6= 4.5.7= 4.5.8= 4.5.9= 5.0.0= 5.0.1= 5.0.10= 5.0.11= 5.0.12= 5.0.13= 5.0.2= 5.0.3= 5.0.4= 5.0.5= 5.0.6= 5.0.7= 5.0.8= 5.0.9= 6.0.0= 6.0.1

No fix yet

More vulnerabilities in owncloud

See all →