CVE-2014-2051: ownCloud Server

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

ownCloud Server before 5.0.15 and 6.0.x before 6.0.2 allows remote attackers to conduct an LDAP injection attack via unspecified vectors, as demonstrated using a "login query."

Affected products

• ownCloud ownCloud Server: version 6.0.0 only; version 6.0.1 only; up to and including 5.0.14; version 5.0.0 only; version 5.0.1 only; version 5.0.2 only; …

Published 2014-06-05. Last modified 2026-06-17.