[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2023-49105":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-27T23:51:06.732Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":660,"aliases":661,"duplicate_of":9,"upstream":662,"downstream":663,"duplicates":664,"related":665,"reserved_at":9,"published_at":666,"modified_at":667,"state":668,"summary":669,"references_raw":680,"kevs":702,"epss":712,"epss_history":714,"metrics":928,"affected":936},"CVE-2023-49105","An issue was discovered in ownCloud owncloud/core before 10.13.1. An attacker can access, modify, or delete any file without authentication if the username of a victim is known, and the victim has no signing-key configured. This occurs because pre-signed URLs can be accepted even when no signing-key is configured for the owner of the files. The earliest affected version is 10.6.0.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","weakness","Draft","Class","High",[20,182,261,265,269,273,292,481,543,627],{"id":21,"name":22,"techniques":23},"CAPEC-114","Authentication Abuse",[24],{"id":25,"name":26,"tactics":27,"countermeasures":34},"T1548","Abuse Elevation Control Mechanism",[28,31],{"id":29,"name":30},"TA0030","Defense Evasion",{"id":32,"name":33},"TA0111","Privilege Escalation",[35,40,45,50,55,59,63,67,72,76,80,84,88,92,96,100,104,109,113,117,121,126,130,134,138,142,146,150,154,158,162,166,170,174,178],{"id":36,"name":37,"tactic":38},"D3-CM","Content Modification",{"name":39},"Isolate",{"id":41,"name":42,"tactic":43},"D3-AEM","Application Exception Monitoring",{"name":44},"Detect",{"id":46,"name":47,"tactic":48},"D3-DF","Decoy File",{"name":49},"Deceive",{"id":51,"name":52,"tactic":53},"D3-CI","Configuration Inventory",{"name":54},"Model",{"id":56,"name":57,"tactic":58},"D3-SCA","System Call Analysis",{"name":44},{"id":60,"name":61,"tactic":62},"D3-SFA","System File Analysis",{"name":44},{"id":64,"name":65,"tactic":66},"D3-FA","File Analysis",{"name":44},{"id":68,"name":69,"tactic":70},"D3-FE","File Encryption",{"name":71},"Harden",{"id":73,"name":74,"tactic":75},"D3-AA","Agent Authentication",{"name":71},{"id":77,"name":78,"tactic":79},"D3-CDP","Change Default Password",{"name":71},{"id":81,"name":82,"tactic":83},"D3-AM","Access Modeling",{"name":54},{"id":85,"name":86,"tactic":87},"D3-DI","Data Inventory",{"name":54},{"id":89,"name":90,"tactic":91},"D3-NTPM","Network Traffic Policy Mapping",{"name":54},{"id":93,"name":94,"tactic":95},"D3-PSA","Process Spawn Analysis",{"name":44},{"id":97,"name":98,"tactic":99},"D3-SCP","System Configuration Permissions",{"name":71},{"id":101,"name":102,"tactic":103},"D3-FIM","File Integrity Monitoring",{"name":44},{"id":105,"name":106,"tactic":107},"D3-RC","Restore Configuration",{"name":108},"Restore",{"id":110,"name":111,"tactic":112},"D3-RF","Restore File",{"name":108},{"id":114,"name":115,"tactic":116},"D3-ULA","Unlock Account",{"name":108},{"id":118,"name":119,"tactic":120},"D3-RUAA","Restore User Account Access",{"name":108},{"id":122,"name":123,"tactic":124},"D3-FEV","File Eviction",{"name":125},"Evict",{"id":127,"name":128,"tactic":129},"D3-RD","Restore Database",{"name":108},{"id":131,"name":132,"tactic":133},"D3-AL","Account Locking",{"name":125},{"id":135,"name":136,"tactic":137},"D3-OPM","Operational Process Monitoring",{"name":44},{"id":139,"name":140,"tactic":141},"D3-DA","Dynamic Analysis",{"name":44},{"id":143,"name":144,"tactic":145},"D3-EFA","Emulated File Analysis",{"name":44},{"id":147,"name":148,"tactic":149},"D3-SCF","System Call Filtering",{"name":39},{"id":151,"name":152,"tactic":153},"D3-CF","Content Filtering",{"name":39},{"id":155,"name":156,"tactic":157},"D3-LFP","Local File Permissions",{"name":39},{"id":159,"name":160,"tactic":161},"D3-RFAM","Remote File Access Mediation",{"name":39},{"id":163,"name":164,"tactic":165},"D3-CQ","Content Quarantine",{"name":39},{"id":167,"name":168,"tactic":169},"D3-UAP","User Account Permissions",{"name":39},{"id":171,"name":172,"tactic":173},"D3-HBPI","Hardware-based Process Isolation",{"name":39},{"id":175,"name":176,"tactic":177},"D3-EAL","Executable Allowlisting",{"name":39},{"id":179,"name":180,"tactic":181},"D3-EDL","Executable Denylisting",{"name":39},{"id":183,"name":184,"techniques":185},"CAPEC-115","Authentication Bypass",[186],{"id":25,"name":26,"tactics":187,"countermeasures":190},[188,189],{"id":29,"name":30},{"id":32,"name":33},[191,193,195,197,199,201,203,205,207,209,211,213,215,217,219,221,223,225,227,229,231,233,235,237,239,241,243,245,247,249,251,253,255,257,259],{"id":36,"name":37,"tactic":192},{"name":39},{"id":41,"name":42,"tactic":194},{"name":44},{"id":46,"name":47,"tactic":196},{"name":49},{"id":51,"name":52,"tactic":198},{"name":54},{"id":56,"name":57,"tactic":200},{"name":44},{"id":60,"name":61,"tactic":202},{"name":44},{"id":64,"name":65,"tactic":204},{"name":44},{"id":68,"name":69,"tactic":206},{"name":71},{"id":73,"name":74,"tactic":208},{"name":71},{"id":77,"name":78,"tactic":210},{"name":71},{"id":81,"name":82,"tactic":212},{"name":54},{"id":85,"name":86,"tactic":214},{"name":54},{"id":89,"name":90,"tactic":216},{"name":54},{"id":93,"name":94,"tactic":218},{"name":44},{"id":97,"name":98,"tactic":220},{"name":71},{"id":101,"name":102,"tactic":222},{"name":44},{"id":105,"name":106,"tactic":224},{"name":108},{"id":110,"name":111,"tactic":226},{"name":108},{"id":114,"name":115,"tactic":228},{"name":108},{"id":118,"name":119,"tactic":230},{"name":108},{"id":122,"name":123,"tactic":232},{"name":125},{"id":127,"name":128,"tactic":234},{"name":108},{"id":131,"name":132,"tactic":236},{"name":125},{"id":135,"name":136,"tactic":238},{"name":44},{"id":139,"name":140,"tactic":240},{"name":44},{"id":143,"name":144,"tactic":242},{"name":44},{"id":147,"name":148,"tactic":244},{"name":39},{"id":151,"name":152,"tactic":246},{"name":39},{"id":155,"name":156,"tactic":248},{"name":39},{"id":159,"name":160,"tactic":250},{"name":39},{"id":163,"name":164,"tactic":252},{"name":39},{"id":167,"name":168,"tactic":254},{"name":39},{"id":171,"name":172,"tactic":256},{"name":39},{"id":175,"name":176,"tactic":258},{"name":39},{"id":179,"name":180,"tactic":260},{"name":39},{"id":262,"name":263,"techniques":264},"CAPEC-151","Identity Spoofing",[],{"id":266,"name":267,"techniques":268},"CAPEC-194","Fake the Source of Data",[],{"id":270,"name":271,"techniques":272},"CAPEC-22","Exploiting Trust in Client",[],{"id":274,"name":275,"techniques":276},"CAPEC-57","Utilizing REST's Trust in the System Resource to Obtain Sensitive Data",[277],{"id":278,"name":279,"tactics":280,"countermeasures":287},"T1040","Network Sniffing",[281,284],{"id":282,"name":283},"TA0031","Credential Access",{"id":285,"name":286},"TA0102","Discovery",[288],{"id":289,"name":290,"tactic":291},"D3-DNSTA","DNS Traffic Analysis",{"name":44},{"id":293,"name":294,"techniques":295},"CAPEC-593","Session Hijacking",[296,340,453],{"id":297,"name":298,"tactics":299,"countermeasures":303},"T1185","Browser Session Hijacking",[300],{"id":301,"name":302},"TA0100","Collection",[304,308,312,316,320,324,328,332,336],{"id":305,"name":306,"tactic":307},"D3-NTF","Network Traffic Filtering",{"name":39},{"id":309,"name":310,"tactic":311},"D3-NTSA","Network Traffic Signature Analysis",{"name":44},{"id":313,"name":314,"tactic":315},"D3-UGLPA","User Geolocation Logon Pattern Analysis",{"name":44},{"id":317,"name":318,"tactic":319},"D3-APCA","Application Protocol Command Analysis",{"name":44},{"id":321,"name":322,"tactic":323},"D3-NTCD","Network Traffic Community Deviation",{"name":44},{"id":325,"name":326,"tactic":327},"D3-RTSD","Remote Terminal Session Detection",{"name":44},{"id":329,"name":330,"tactic":331},"D3-PMAD","Protocol Metadata Anomaly Detection",{"name":44},{"id":333,"name":334,"tactic":335},"D3-CSPP","Client-server Payload Profiling",{"name":44},{"id":337,"name":338,"tactic":339},"D3-PHDURA","Per Host Download-Upload Ratio Analysis",{"name":44},{"id":341,"name":342,"tactics":343,"countermeasures":348},"T1550.001","Application Access Token",[344,345],{"id":29,"name":30},{"id":346,"name":347},"TA0109","Lateral Movement",[349,353,355,359,361,365,367,371,375,379,383,387,391,393,395,399,403,405,409,413,415,419,421,425,429,431,435,439,443,445,449,451],{"id":350,"name":351,"tactic":352},"D3-PS","Process Suspension",{"name":125},{"id":317,"name":318,"tactic":354},{"name":44},{"id":356,"name":357,"tactic":358},"D3-MFA","Multi-factor Authentication",{"name":71},{"id":329,"name":330,"tactic":360},{"name":44},{"id":362,"name":363,"tactic":364},"D3-PT","Process Termination",{"name":125},{"id":93,"name":94,"tactic":366},{"name":44},{"id":368,"name":369,"tactic":370},"D3-CH","Credential Hardening",{"name":71},{"id":372,"name":373,"tactic":374},"D3-PLA","Process Lineage Analysis",{"name":44},{"id":376,"name":377,"tactic":378},"D3-CR","Credential Revocation",{"name":125},{"id":380,"name":381,"tactic":382},"D3-ANCI","Authentication Cache Invalidation",{"name":125},{"id":384,"name":385,"tactic":386},"D3-PSMD","Process Self-Modification Detection",{"name":44},{"id":388,"name":389,"tactic":390},"D3-KBPI","Kernel-based Process Isolation",{"name":39},{"id":147,"name":148,"tactic":392},{"name":39},{"id":171,"name":172,"tactic":394},{"name":39},{"id":396,"name":397,"tactic":398},"D3-ABPI","Application-based Process Isolation",{"name":39},{"id":400,"name":401,"tactic":402},"D3-CTS","Credential Transmission Scoping",{"name":39},{"id":337,"name":338,"tactic":404},{"name":44},{"id":406,"name":407,"tactic":408},"D3-DUC","Decoy User Credential",{"name":49},{"id":410,"name":411,"tactic":412},"D3-WSAM","Web Session Access Mediation",{"name":39},{"id":325,"name":326,"tactic":414},{"name":44},{"id":416,"name":417,"tactic":418},"D3-CCSA","Credential Compromise Scope Analysis",{"name":44},{"id":321,"name":322,"tactic":420},{"name":44},{"id":422,"name":423,"tactic":424},"D3-RIC","Reissue Credential",{"name":108},{"id":426,"name":427,"tactic":428},"D3-TBA","Token-based Authentication",{"name":71},{"id":313,"name":314,"tactic":430},{"name":44},{"id":432,"name":433,"tactic":434},"D3-TB","Token Binding",{"name":71},{"id":436,"name":437,"tactic":438},"D3-HR","Host Reboot",{"name":125},{"id":440,"name":441,"tactic":442},"D3-HS","Host Shutdown",{"name":125},{"id":305,"name":306,"tactic":444},{"name":39},{"id":446,"name":447,"tactic":448},"D3-CRO","Credential Rotation",{"name":71},{"id":309,"name":310,"tactic":450},{"name":44},{"id":333,"name":334,"tactic":452},{"name":44},{"id":454,"name":455,"tactics":456,"countermeasures":458},"T1563","Remote Service Session Hijacking",[457],{"id":346,"name":347},[459,461,463,465,469,471,473,475,477,479],{"id":309,"name":310,"tactic":460},{"name":44},{"id":325,"name":326,"tactic":462},{"name":44},{"id":333,"name":334,"tactic":464},{"name":44},{"id":466,"name":467,"tactic":468},"D3-ST","Session Termination",{"name":125},{"id":317,"name":318,"tactic":470},{"name":44},{"id":329,"name":330,"tactic":472},{"name":44},{"id":305,"name":306,"tactic":474},{"name":39},{"id":321,"name":322,"tactic":476},{"name":44},{"id":337,"name":338,"tactic":478},{"name":44},{"id":313,"name":314,"tactic":480},{"name":44},{"id":482,"name":483,"techniques":484},"CAPEC-633","Token Impersonation",[485],{"id":486,"name":487,"tactics":488,"countermeasures":494},"T1134","Access Token Manipulation",[489,490,493],{"id":29,"name":30},{"id":491,"name":492},"TA0005","Stealth",{"id":32,"name":33},[495,497,499,501,503,505,507,509,511,513,515,517,519,521,523,525,527,529,531,533,535,537,539,541],{"id":400,"name":401,"tactic":496},{"name":39},{"id":416,"name":417,"tactic":498},{"name":44},{"id":135,"name":136,"tactic":500},{"name":44},{"id":93,"name":94,"tactic":502},{"name":44},{"id":466,"name":467,"tactic":504},{"name":125},{"id":376,"name":377,"tactic":506},{"name":125},{"id":380,"name":381,"tactic":508},{"name":125},{"id":51,"name":52,"tactic":510},{"name":54},{"id":406,"name":407,"tactic":512},{"name":49},{"id":368,"name":369,"tactic":514},{"name":71},{"id":171,"name":172,"tactic":516},{"name":39},{"id":356,"name":357,"tactic":518},{"name":71},{"id":446,"name":447,"tactic":520},{"name":71},{"id":432,"name":433,"tactic":522},{"name":71},{"id":426,"name":427,"tactic":524},{"name":71},{"id":105,"name":106,"tactic":526},{"name":108},{"id":422,"name":423,"tactic":528},{"name":108},{"id":89,"name":90,"tactic":530},{"name":54},{"id":81,"name":82,"tactic":532},{"name":54},{"id":147,"name":148,"tactic":534},{"name":39},{"id":41,"name":42,"tactic":536},{"name":44},{"id":56,"name":57,"tactic":538},{"name":44},{"id":175,"name":176,"tactic":540},{"name":39},{"id":179,"name":180,"tactic":542},{"name":39},{"id":544,"name":545,"techniques":546},"CAPEC-650","Upload a Web Shell to a Web Server",[547],{"id":548,"name":549,"tactics":550,"countermeasures":554},"T1505.003","Web Shell",[551],{"id":552,"name":553},"TA0110","Persistence",[555,557,559,561,563,567,571,573,575,577,579,581,583,585,589,591,593,595,597,599,601,603,605,607,609,611,613,615,617,621,625],{"id":68,"name":69,"tactic":556},{"name":71},{"id":396,"name":397,"tactic":558},{"name":39},{"id":46,"name":47,"tactic":560},{"name":49},{"id":384,"name":385,"tactic":562},{"name":44},{"id":564,"name":565,"tactic":566},"D3-PLM","Physical Link Mapping",{"name":54},{"id":568,"name":569,"tactic":570},"D3-LLM","Logical Link Mapping",{"name":54},{"id":139,"name":140,"tactic":572},{"name":44},{"id":101,"name":102,"tactic":574},{"name":44},{"id":179,"name":180,"tactic":576},{"name":39},{"id":388,"name":389,"tactic":578},{"name":39},{"id":143,"name":144,"tactic":580},{"name":44},{"id":362,"name":363,"tactic":582},{"name":125},{"id":163,"name":164,"tactic":584},{"name":39},{"id":586,"name":587,"tactic":588},"D3-EHB","Endpoint Health Beacon",{"name":44},{"id":147,"name":148,"tactic":590},{"name":39},{"id":151,"name":152,"tactic":592},{"name":39},{"id":372,"name":373,"tactic":594},{"name":44},{"id":36,"name":37,"tactic":596},{"name":39},{"id":350,"name":351,"tactic":598},{"name":125},{"id":175,"name":176,"tactic":600},{"name":39},{"id":122,"name":123,"tactic":602},{"name":125},{"id":93,"name":94,"tactic":604},{"name":44},{"id":159,"name":160,"tactic":606},{"name":39},{"id":436,"name":437,"tactic":608},{"name":125},{"id":110,"name":111,"tactic":610},{"name":108},{"id":440,"name":441,"tactic":612},{"name":125},{"id":171,"name":172,"tactic":614},{"name":39},{"id":64,"name":65,"tactic":616},{"name":44},{"id":618,"name":619,"tactic":620},"D3-NNI","Network Node Inventory",{"name":54},{"id":622,"name":623,"tactic":624},"D3-RNA","Restore Network Access",{"name":108},{"id":155,"name":156,"tactic":626},{"name":39},{"id":628,"name":629,"techniques":630},"CAPEC-94","Adversary in the Middle (AiTM)",[631],{"id":632,"name":633,"tactics":634,"countermeasures":637},"T1557","Adversary-in-the-Middle",[635,636],{"id":282,"name":283},{"id":301,"name":302},[638,640,642,644,646,648,650,652,654,656],{"id":305,"name":306,"tactic":639},{"name":39},{"id":313,"name":314,"tactic":641},{"name":44},{"id":329,"name":330,"tactic":643},{"name":44},{"id":333,"name":334,"tactic":645},{"name":44},{"id":337,"name":338,"tactic":647},{"name":44},{"id":309,"name":310,"tactic":649},{"name":44},{"id":317,"name":318,"tactic":651},{"name":44},{"id":321,"name":322,"tactic":653},{"name":44},{"id":325,"name":326,"tactic":655},{"name":44},{"id":657,"name":658,"tactic":659},"D3-CAA","Connection Attempt Analysis",{"name":44},[],[],[],[],[],[],"2023-11-21T00:00:00.000Z","2026-08-27T19:58:23.541Z","Modified",{"cisa_kev":670,"cisa_ransomware":671,"cisa_vendor":672,"epss_severity":673,"epss_score":674,"severity":675,"severity_score":676,"severity_version":677,"severity_source":678,"severity_vector":679,"severity_status":668},true,false,"ownCloud","medium",0.11074,"critical",9.8,"v3.1","cve.org","CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N",[681,687,692,697],{"url":682,"sources":683,"tags":685},"https://owncloud.org/security",[678,684],"nvd",[686],"Product",{"url":688,"sources":689,"tags":690},"https://owncloud.com/security-advisories/webdav-api-authentication-bypass-using-pre-signed-urls/",[678,684],[691],"Vendor Advisory",{"url":693,"sources":694,"tags":695},"https://hunt.io/blog/chinese-speaking-operator-philippine-nuclear-naval-contractor",[678,684],[696],"Third Party Advisory",{"url":698,"sources":699,"tags":700},"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-49105",[678,684],[701],"Government Resource",[703],{"source":704,"vendor":672,"product":672,"date_added":705,"vulnerability_name":706,"short_description":707,"required_action":708,"due_date":709,"known_ransomware_campaign_use":710,"notes":711,"exploitation_type":9},"cisa","2026-08-27","ownCloud Improper Authentication Vulnerability","ownCloud contains an improper authentication vulnerability that allows an attacker to access, modify, or delete any file without authentication if the username of a victim is known, and the victim has no signing-key configured.","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","2026-08-30","Unknown","https://owncloud.org/security ; https://owncloud.com/security-advisories/webdav-api-authentication-bypass-using-pre-signed-urls/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2023-49105",{"date":705,"score":674,"percentile":713},0.95592,[715,719,722,724,726,728,730,732,734,736,739,741,743,745,747,751,753,756,758,760,762,764,766,768,770,772,774,777,780,782,785,787,790,792,796,800,804,807,809,811,813,815,817,820,823,825,827,829,832,836,839,841,844,846,849,851,853,855,857,860,862,864,866,868,870,872,874,876,878,880,882,884,886,888,891,893,895,897,900,902,904,907,910,912,915,917,919,921,923,925],{"date":716,"score":717,"percentile":718},"2025-11-04",0.86244,0.99356,{"date":720,"score":717,"percentile":721},"2025-11-05",0.99357,{"date":723,"score":717,"percentile":718},"2025-11-06",{"date":725,"score":717,"percentile":721},"2025-11-07",{"date":727,"score":717,"percentile":718},"2025-11-08",{"date":729,"score":717,"percentile":721},"2025-11-09",{"date":731,"score":717,"percentile":718},"2025-11-10",{"date":733,"score":717,"percentile":721},"2025-11-11",{"date":735,"score":717,"percentile":721},"2025-11-12",{"date":737,"score":717,"percentile":738},"2025-11-13",0.99358,{"date":740,"score":717,"percentile":738},"2025-11-14",{"date":742,"score":717,"percentile":738},"2025-11-15",{"date":744,"score":717,"percentile":738},"2025-11-16",{"date":746,"score":717,"percentile":738},"2025-11-17",{"date":748,"score":749,"percentile":750},"2025-11-18",0.69499,0.9869,{"date":752,"score":749,"percentile":750},"2025-11-19",{"date":754,"score":749,"percentile":755},"2025-11-20",0.98691,{"date":757,"score":717,"percentile":718},"2025-11-21",{"date":759,"score":717,"percentile":718},"2025-11-22",{"date":761,"score":717,"percentile":721},"2025-11-23",{"date":763,"score":717,"percentile":718},"2025-11-24",{"date":765,"score":717,"percentile":721},"2025-11-25",{"date":767,"score":717,"percentile":721},"2025-11-26",{"date":769,"score":717,"percentile":721},"2025-11-27",{"date":771,"score":717,"percentile":721},"2025-11-28",{"date":773,"score":717,"percentile":738},"2025-11-29",{"date":775,"score":717,"percentile":776},"2025-11-30",0.99359,{"date":778,"score":717,"percentile":779},"2025-12-01",0.99372,{"date":781,"score":717,"percentile":779},"2025-12-02",{"date":783,"score":717,"percentile":784},"2025-12-03",0.99371,{"date":786,"score":717,"percentile":776},"2025-12-04",{"date":788,"score":717,"percentile":789},"2025-12-05",0.99361,{"date":791,"score":717,"percentile":789},"2025-12-06",{"date":793,"score":794,"percentile":795},"2025-12-07",0.88053,0.99447,{"date":797,"score":798,"percentile":799},"2025-12-08",0.88867,0.9949,{"date":801,"score":802,"percentile":803},"2025-12-09",0.89272,0.99514,{"date":805,"score":802,"percentile":806},"2025-12-10",0.99516,{"date":808,"score":802,"percentile":806},"2025-12-11",{"date":810,"score":802,"percentile":806},"2025-12-12",{"date":812,"score":802,"percentile":806},"2025-12-13",{"date":814,"score":802,"percentile":806},"2025-12-14",{"date":816,"score":802,"percentile":806},"2025-12-15",{"date":818,"score":802,"percentile":819},"2025-12-16",0.99517,{"date":821,"score":802,"percentile":822},"2025-12-17",0.99518,{"date":824,"score":802,"percentile":822},"2025-12-18",{"date":826,"score":802,"percentile":822},"2025-12-19",{"date":828,"score":802,"percentile":822},"2025-12-20",{"date":830,"score":802,"percentile":831},"2025-12-21",0.99519,{"date":833,"score":834,"percentile":835},"2025-12-22",0.89605,0.99534,{"date":837,"score":834,"percentile":838},"2025-12-23",0.99533,{"date":840,"score":834,"percentile":835},"2025-12-24",{"date":842,"score":834,"percentile":843},"2025-12-25",0.99535,{"date":845,"score":834,"percentile":843},"2025-12-26",{"date":847,"score":834,"percentile":848},"2025-12-27",0.99537,{"date":850,"score":834,"percentile":835},"2025-12-28",{"date":852,"score":834,"percentile":835},"2025-12-29",{"date":854,"score":834,"percentile":835},"2025-12-30",{"date":856,"score":834,"percentile":835},"2025-12-31",{"date":858,"score":834,"percentile":859},"2026-01-01",0.99543,{"date":861,"score":834,"percentile":859},"2026-01-02",{"date":863,"score":834,"percentile":859},"2026-01-03",{"date":865,"score":834,"percentile":835},"2026-01-04",{"date":867,"score":834,"percentile":835},"2026-01-05",{"date":869,"score":834,"percentile":835},"2026-01-06",{"date":871,"score":834,"percentile":835},"2026-01-07",{"date":873,"score":834,"percentile":838},"2026-01-08",{"date":875,"score":834,"percentile":838},"2026-01-09",{"date":877,"score":834,"percentile":835},"2026-01-10",{"date":879,"score":834,"percentile":835},"2026-01-11",{"date":881,"score":834,"percentile":835},"2026-01-12",{"date":883,"score":834,"percentile":843},"2026-01-13",{"date":885,"score":834,"percentile":843},"2026-01-14",{"date":887,"score":834,"percentile":843},"2026-01-15",{"date":889,"score":834,"percentile":890},"2026-01-16",0.99536,{"date":892,"score":834,"percentile":890},"2026-01-17",{"date":894,"score":834,"percentile":848},"2026-01-18",{"date":896,"score":834,"percentile":848},"2026-01-19",{"date":898,"score":834,"percentile":899},"2026-01-20",0.99538,{"date":901,"score":834,"percentile":848},"2026-01-21",{"date":903,"score":834,"percentile":899},"2026-01-22",{"date":905,"score":834,"percentile":906},"2026-01-23",0.99539,{"date":908,"score":834,"percentile":909},"2026-01-24",0.99541,{"date":911,"score":834,"percentile":909},"2026-01-25",{"date":913,"score":834,"percentile":914},"2026-01-26",0.99542,{"date":916,"score":834,"percentile":914},"2026-01-27",{"date":918,"score":834,"percentile":914},"2026-01-28",{"date":920,"score":834,"percentile":914},"2026-01-29",{"date":922,"score":834,"percentile":909},"2026-01-30",{"date":924,"score":834,"percentile":914},"2026-01-31",{"date":926,"score":834,"percentile":927},"2026-02-01",0.99551,[929,933],{"source":678,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":930,"cvss_v4_0":9},{"baseScore":676,"baseSeverity":931,"vectorString":679,"impactScore":676,"exploitabilityScore":932},"CRITICAL",10,{"source":684,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":934,"cvss_v4_0":9},{"baseScore":676,"baseSeverity":931,"vectorString":935,"impactScore":676,"exploitabilityScore":932},"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",[937],{"ecosystem":9,"name":938,"vendor":939,"product":940,"cpe_part":941,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":942},"owncloud server","owncloud","owncloud_server","a",[943],{"version":944,"is_range":670,"range_type":945,"version_start":946,"version_start_type":947,"version_end":948,"version_end_type":949,"fixed_in":9},"gte10.6.0_lt10.13.1","cpe","10.6.0","including","10.13.1","excluding"]