Sploitus

14 exploited vulnerabilities in Onlyoffice Document Server

Vulnerabilities with publicly known exploits

Vendors
Onlyoffice
With known exploits
14
Affected Onlyoffice Document Server versions
≤ 7.3.2, 6.0.0, 5.6.3, 5.6.0.21, 5.6.4.13, 8.0.1, 7.0.0
Affected Onlyoffice Core versions
≤ 6.1.0.26

Vulnerabilities with exploits

Highest CVSS first — 1 of these already have exploit code on Sploitus

CVE-2023-30187
CVSS 9.8 CRITICAL 2023-08-14
CVE-2023-30186
CVSS 9.8 CRITICAL 2023-08-14
CVE-2022-29777
CVSS 9.8 CRITICAL 2022-06-01FIX AVAILABLE
CVE-2022-29776
CVSS 9.8 CRITICAL 2022-06-01FIX AVAILABLE
CVE-2021-3199
CVSS 9.8 CRITICAL 2021-01-22FIX AVAILABLE
CVE-2021-25833
CVSS 9.8 CRITICAL 2021-03-01
CVE-2021-25832
CVSS 9.8 CRITICAL 2021-03-01FIX AVAILABLE
CVE-2021-25831
CVSS 9.8 CRITICAL 2021-03-01
CVE-2021-25830
CVSS 9.8 CRITICAL 2021-03-01
CVE-2021-25829
CVSS 7.8 HIGH 2021-03-01
CVE-2023-30188
CVSS 7.5 HIGH 2023-08-14
CVE-2023-46988 1 exploit
CVSS 6.7 MEDIUM 2025-04-01FIX AVAILABLE
Exploit for CVE-2023-46988
CVE-2022-24229
CVSS 6.1 MEDIUM 2022-04-08FIX AVAILABLE
CVE-2026-41034
CVSS 5.0 MEDIUM 2026-04-16FIX AVAILABLE