All packages
ONLYOFFICE Docs vulnerabilities
3 known CVE vulnerabilities in ONLYOFFICE Docs, translated and rated.
- CVE-2025-68936Medium
ONLYOFFICE Docs before version 9.2.1 contains an XSS vulnerability related to the Color theme name, which may allow injection of malicious script.
- CVE-2025-68935Medium
XSS vulnerability in ONLYOFFICE Docs before 9.2.1, present in the Font field of the Multilevel list settings window. This is related to DocumentServer.
- CVE-2025-68917Medium
ONLYOFFICE Docs before 9.2.1 allows XSS in the textarea of the comment editing form. This is related to DocumentServer.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS