VULNERABILITY INTELLIGENCE

CVE-2014-2051

CVSS score7.5 HIGH
EPSS probability1.46%
CISA KEVNot currently listed
Published2014-06-05
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P

Description

ownCloud Server before 5.0.15 and 6.0.x before 6.0.2 allows remote attackers to conduct an LDAP injection attack via unspecified vectors, as demonstrated using a "login query."

Weakness classification

  • CWE-94: Improper Control of Generation of Code ('Code Injection')

Primary references