Seafile Server
Vendor:
First CVE: Mar 19, 2018 · Active for 8 years
4
Total CVEs
More Total CVEs than 75% of tracked products
1.0
Avg CVEs / Year
Bottom 1%
7.1
Avg CVSS
Higher Avg CVSS than 46% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Seafile Server over time
Volume of CVEsAvg CVSS Base Score
First CVE
Mar 19, 2018
8 years ago
Most Recent CVE
Mar 25, 2026
125 days ago
CVE Severity & Scoring
Seafile Server4 CVEs
50%
50%
All CVEs353,173 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local1 (25.0%)
Network3 (75.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low3 (75.0%)
High1 (25.0%)
Unknown0 (0.0%)
User Interaction
None2 (50.0%)
Unknown0 (0.0%)
Required2 (50.0%)
Privileges Required
Low2 (50.0%)
High0 (0.0%)
None2 (50.0%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (4 CVEs).
4 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2026-30587HIGH Multiple Stored XSS vulnerabilities exist in Seafile Server version 13.0.15,13.0.16-pro,12.0.14 and prior and fixed in 13.0.17, 13.0.17-pro, and 12.0.20-pro, via the Seadoc (sdoc) | Mar 25, 2026 | 8.7 | 25 | NO | NO |
CVE-2014-5443HIGH Seafile Server before 3.1.2 and Server Professional Edition before 3.1.0 allow local users to gain privileges via vectors related to ccnet handling user accounts. | Mar 19, 2018 | 7.8 | 25 | NO | NO |
CVE-2025-65516MEDIUM A stored cross-site scripting (XSS) vulnerability was discovered in Seafile Community Edition prior to version 13.0.12. When Seafile is configured with the Golang file server, an a | Dec 4, 2025 | 6.1 | 21 | NO | NO |
CVE-2021-43820MEDIUM Seafile is an open source cloud storage system. A sync token is used in Seafile file syncing protocol to authorize access to library data. To improve performance, the token is cach | Dec 14, 2021 | 5.9 | 21 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (4 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (4 CVEs).
Media Mentions
Signals from CVEs in this product scope (4 CVEs).
Top CNAs Publishing CVEs For Seafile Server
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 13.0.16 | 1 | 8.7 | 0.3% | 0 | 0 |
| 13.0.15 | 1 | 8.7 | 0.3% | 0 | 0 |