nextcloud contacts

Name: nextcloud contacts
Brand: nextcloud

productUS

cpe:2.3:a:nextcloud:contacts:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

unpatched

critical

by severity

0critical0high7medium0low

updated 2026-10-24

vulnerabilities (7)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-33182US	medium4.3	0.85% (58th)	—	4.2.4	2023-05-30	2 versions
CVE-2020-8181US	medium4.3	0.79% (56th)	—	3.3.0	2020-07-10	< 3.3.0
CVE-2020-8280US	medium5.4	0.64% (50th)	—	3.4.1	2021-01-06	< 3.4.1
CVE-2018-3764US	medium4.8	0.64% (50th)	—	2.1.2	2018-07-05	< 2.1.2
CVE-2020-8281US	medium5.4	0.63% (50th)	—	3.4.0	2021-01-06	< 3.4.0
CVE-2021-39221US	medium5.4	0.52% (43rd)	—	4.0.3	2021-10-25	< 4.0.3
CVE-2025-66554US	medium5.4	0.25% (15th)	—	5.5.4	2025-12-05	3 versions

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5 CVEs
CWE-434Unrestricted Upload of File with Dangerous Type2 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-840CWE-8401 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.