# Scan.nextcloud.com gives an A+ for a Nextcloud server with EOL version 24

**URL:** <https://help.nextcloud.com/t/scan-nextcloud-com-gives-an-a-for-a-nextcloud-server-with-eol-version-24/161916>\
**Category:** ℹ️ Support\
**Tags:** security, nextcloud, security\_scanner\
**Created:** [May 11, 2023, 11:31am UTC](https://help.nextcloud.com/t/scan-nextcloud-com-gives-an-a-for-a-nextcloud-server-with-eol-version-24/161916 "2023-05-11T11:31:14Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![kaloi](https://help.nextcloud.com/letter_avatar/kaloi/32/5_5575768a8748004e209b776fc1b2916d.png) [@kaloi](https://help.nextcloud.com/u/kaloi)\
**Post date:** [May 11, 2023, 11:31am UTC](https://help.nextcloud.com/t/scan-nextcloud-com-gives-an-a-for-a-nextcloud-server-with-eol-version-24/161916/1 "2023-05-11T11:31:14Z")

</div>

I use icinga2 for monitoring various servers. One of the checks scans various Nextcloud versions for vulnerabilities via [scan.nextcloud.com](http://scan.nextcloud.com). I noticed that a Nextcloud version that I forgot to update still gets an A+ rating, even though Nextcloud version 24 is EOL or EOS. This makes the Security Scanner pretty useless.

 ![screenshot](https://help.nextcloud.com/uploads/default/original/3X/4/2/428ad176753fc8c0dc27367e2befedd25ea0a130.png)

---

<div class="post-metadata">

**Author:** ![tflidd](https://help.nextcloud.com/letter_avatar/tflidd/32/5_5575768a8748004e209b776fc1b2916d.png) [@tflidd](https://help.nextcloud.com/u/tflidd)\
**Post date:** [May 11, 2023, 11:35am UTC](https://help.nextcloud.com/t/scan-nextcloud-com-gives-an-a-for-a-nextcloud-server-with-eol-version-24/161916/2 "2023-05-11T11:35:54Z")

</div>

Well technically, it has all the security fixes NC 25 has as well. So there are no missing security fixes yet. Sure, it would be nice to tell users to upgrade soon.

---

<div class="post-metadata">

**Author:** ![kaloi](https://help.nextcloud.com/letter_avatar/kaloi/32/5_5575768a8748004e209b776fc1b2916d.png) [@kaloi](https://help.nextcloud.com/u/kaloi)\
**Post date:** [May 11, 2023, 12:36pm UTC](https://help.nextcloud.com/t/scan-nextcloud-com-gives-an-a-for-a-nextcloud-server-with-eol-version-24/161916/3 "2023-05-11T12:36:06Z")

</div>

It literally states that this major version is still supported, which is not true. Someone at Nextcloud simply did not adjust the script.

---

<div class="post-metadata">

**Author:** ![szaimen](https://help.nextcloud.com/user_avatar/help.nextcloud.com/szaimen/32/63019_2.png) [@szaimen](https://help.nextcloud.com/u/szaimen)\
**Post date:** [May 11, 2023, 12:39pm UTC](https://help.nextcloud.com/t/scan-nextcloud-com-gives-an-a-for-a-nextcloud-server-with-eol-version-24/161916/4 "2023-05-11T12:39:31Z")

</div>

Actually the tool was already adjusted but not deployed yet.

---

<div class="post-metadata">

**Author:** ![devnull](https://help.nextcloud.com/user_avatar/help.nextcloud.com/devnull/32/27793_2.png) [@devnull](https://help.nextcloud.com/u/devnull)\
**Post date:** [May 11, 2023, 12:47pm UTC](https://help.nextcloud.com/t/scan-nextcloud-com-gives-an-a-for-a-nextcloud-server-with-eol-version-24/161916/5 "2023-05-11T12:47:28Z")

</div>

> [@kaloi](#):
>
> It literally states that this major version is still supported, which is not true.

Nextcloud 24 is **unsupported**? I think Nextcloud uses the text **unsupported** for other use cases than **End of Life** look [here](https://help.nextcloud.com/t/dealing-with-push-notifications/161762).

[https://i.imgur.com/p3bOSso.png](https://i.imgur.com/p3bOSso.png)

---

<div class="post-metadata">

**Author:** ![wwe](https://help.nextcloud.com/user_avatar/help.nextcloud.com/wwe/32/72963_2.png) [@wwe](https://help.nextcloud.com/u/wwe)\
**Post date:** [December 14, 2024, 12:26pm UTC](https://help.nextcloud.com/t/scan-nextcloud-com-gives-an-a-for-a-nextcloud-server-with-eol-version-24/161916/6 "2024-12-14T12:26:02Z")

</div>