Is ONLYOFFICE Docs 9.0.2 affected?
Jun 26, 2025 · Release notes ↗
2 known vulnerabilities affect 9.0.2 (highest CVSS 6.4).
9 newer releases in its track, up to 10.0.0. What changed up to 10.0.0
Vulnerabilities affecting 9.0.2
- 6.4 CVE-2025-68935 ONLYOFFICE Docs before 9.2.1 allows XSS via the Font field for the Multilevel list settings window. This is related to DocumentServer. fixed in 9.2.1
- 6.4 CVE-2025-68936 ONLYOFFICE Docs before 9.2.1 allows XSS via the Color theme name. This is related to DocumentServer. fixed in 9.2.1
Newer releases
| 10.0.0 | Oct 12, 2026 | 9.0.2 → 10.0.0 |
| 9.4.0 | May 19, 2026 | 9.0.2 → 9.4.0 |
| 9.3.1 | Mar 3, 2026 | 9.0.2 → 9.3.1 |
| 9.3.0 | Feb 24, 2026 | 9.0.2 → 9.3.0 |
| 9.2.1 | Dec 17, 2025 | 9.0.2 → 9.2.1 |
| 9.2.0 | Dec 1, 2025 | 9.0.2 → 9.2.0 |
| 9.1.0 | Oct 14, 2025 | 9.0.2 → 9.1.0 |
| 9.0.4 | Aug 5, 2025 | 9.0.2 → 9.0.4 |
| 9.0.3 | Jul 8, 2025 | 9.0.2 → 9.0.3 |