CVE-2015-4716: Microsoft Windows

High severity, CVSS 10.0. EPSS: 24.8% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the routing component in ownCloud Server before 7.0.6 and 8.0.x before 8.0.4, when running on Windows, allows remote attackers to reinstall the application or execute arbitrary code via unspecified vectors.

Affected products

• Microsoft Windows: any version
• ownCloud ownCloud: up to and including 7.0.5
• ownCloud ownCloud Server: version 8.0.0 only; version 8.0.2 only; version 8.0.3 only

Published 2015-10-21. Last modified 2026-06-17.