OP
Product
Openmeetings
29
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 5High 15Medium 9Low 0
Watch
Add Openmeetings to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-7664 | 10.0 | Jul 17 | Uploaded XML documents were not correctly validated in Apache OpenMeetings 3.1.0 Affected: 3.1.0; 3.1.1; 3.1.2; 3.1.3; 3.1.4; 3.1.5; +2 more |
| CVE-2024-54676 | 9.8 | Jan 8 | Apache OpenMeetings: Deserialisation of untrusted data in cluster mode Affected: 2.1 before 8.0.0 |
| CVE-2023-28326 | 9.8 | Mar 28 | Vendor: The Apache Software Foundation Versions Affected: Apache OpenMeetings from 2.0.0 before 7.0.0 Description: Attacker can elevate their privileges in any room Affected: 2.0 before 7.0.0 |
| CVE-2016-8736 | 9.8 | Oct 12 | Apache OpenMeetings before 3.1.2 is vulnerable to Remote Code Execution via RMI deserialization attack Affected: before 3.1.2 |
| CVE-2017-7673 | 9.8 | Jul 17 | Apache OpenMeetings 1.0.0 uses not very strong cryptographic storage, captcha is not used in registration and forget password dialogs and auth forms missing brute force protection Affected: 1.0.0; 2.0; 2.1; 2.1.1; 2.2.0; 3.0.0; +15 more |
Showing 5
