cbcvebase.
CVE-2014-2049
published 2014-03-14

CVE-2014-2049: The default Flash Cross Domain policies in ownCloud before 5.0.15 and 6.x before 6.0.2 allows remote attackers to access user files via unspecified vectors.

PriorityP427medium5CVSS 2.0
AVNACLAuNCPINAN
EPSS
1.27%
66.1th percentile
The default Flash Cross Domain policies in ownCloud before 5.0.15 and 6.x before 6.0.2 allows remote attackers to access user files via unspecified vectors.

Affected

52 ranges· showing 25
VendorProductVersion rangeFixed in
owncloudowncloud<= 5.0.14
owncloudowncloud_server
owncloudowncloud_server
owncloudowncloud_server
owncloudowncloud_server
owncloudowncloud_server
owncloudowncloud_server
owncloudowncloud_server
owncloudowncloud_server
owncloudowncloud_server
owncloudowncloud_server
owncloudowncloud_server
owncloudowncloud_server
owncloudowncloud_server
owncloudowncloud_server
owncloudowncloud_server
owncloudowncloud_server
owncloudowncloud_server
owncloudowncloud_server
owncloudowncloud_server
owncloudowncloud_server
owncloudowncloud_server
owncloudowncloud_server
owncloudowncloud_server
owncloudowncloud_server
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.