Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 2025/12/26 8:18 p.m.2 views

CVE-2025-68935

ONLYOFFICE Docs before 9.2.1 allows XSS via the Font field for the Multilevel list settings window. This is related to DocumentServer...

6.4CVSS6.2AI score0.00006EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/25 9:30 p.m.2 views

EUVD-2025-205393

ONLYOFFICE Docs before 9.2.1 allows XSS via the Font field for the Multilevel list settings window. This is related to DocumentServer...

6.4CVSS5.7AI score0.00006EPSS
Exploits0References2
NVD
NVD
added 2025/12/25 8:15 p.m.2 views

CVE-2025-68935

ONLYOFFICE Docs before 9.2.1 allows XSS via the Font field for the Multilevel list settings window. This is related to DocumentServer...

6.4CVSS0.00006EPSS
Exploits0References1
OSV
OSV
added 2025/12/25 8:15 p.m.1 views

CVE-2025-68935

ONLYOFFICE Docs before 9.2.1 allows XSS via the Font field for the Multilevel list settings window. This is related to DocumentServer...

6.1CVSS6.1AI score
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/25 8:5 p.m.1 views

CVE-2025-68935

ONLYOFFICE Docs before 9.2.1 allows XSS via the Font field for the Multilevel list settings window. This is related to DocumentServer...

6.4CVSS5.8AI score0.00006EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/25 8:5 p.m.18 views

CVE-2025-68935

ONLYOFFICE Docs before 9.2.1 allows XSS via the Font field for the Multilevel list settings window. This is related to DocumentServer...

6.4CVSS0.00006EPSS
Exploits0References1
CVE
CVE
added 2025/12/25 8:5 p.m.8 views

CVE-2025-68935

ONLYOFFICE Docs prior to version 9.2.1 is affected by a cross-site scripting (XSS) vulnerability in the Multilevel list settings window’s Font field, related to DocumentServer. The issue is confirmed across multiple sources (including Red Hat, EUVD, NVD, OSV, CVE lists) and lists the vulnerable c...

6.4CVSS5.8AI score0.00006EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/11/13 12:0 a.m.2 views

PT-2025-53411

Name of the Vulnerable Software and Affected Versions ONLYOFFICE Docs versions prior to 9.2.1 Description The software contains a flaw that allows for cross-site scripting XSS. This occurs through manipulation of the Font field within the Multilevel list settings window. The issue is related to t...

6.4CVSS5.8AI score0.00006EPSS
Exploits0References9
Rows per page
Query Builder