owncloud owncloud-server CVE-2015-6670 is a vulnerability in Owncloud Server
Published on October 26, 2015

ownCloud Server before 7.0.8, 8.0.x before 8.0.6, and 8.1.x before 8.1.1 does not properly check ownership of calendars, which allows remote authenticated users to read arbitrary calendars via the calid parameter to apps/calendar/export.php.

Vendor Advisory NVD


Products Associated with CVE-2015-6670

Want to know whenever a new CVE is published for Owncloud Server? stack.watch will email you.

 

Exploit Probability

EPSS
0.18%
Percentile
38.91%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.