OP
Product
Openmeetings
29
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 5High 15Medium 9Low 0
Watch
Add Openmeetings to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-49488 | 6.5 | Jul 14 | Apache OpenMeetings: Arbitrary File Read Affected: 5.0.0 before 9.1.0 |
| CVE-2018-1286 | 6.5 | Feb 28 | In Apache OpenMeetings 3.0.0 - 4.0.1, CRUD operations on privileged users are not password protected allowing an authenticated attacker to deny service for privileged users Affected: 3.0.0 through 4.0.1 |
| CVE-2016-0784 | 6.5 | Apr 11 | Directory traversal vulnerability in the Import/Export System Backups functionality in Apache OpenMeetings before 3.1.1 allows remote authenticated administrators to write to… Affected: through 3.1.0 |
| CVE-2017-7663 | 6.1 | Jul 17 | Both global and Room chat are vulnerable to XSS attack in Apache OpenMeetings 3.2.0 Affected: 3.2.0; 3.2.1 |
| CVE-2016-3089 | 6.1 | Aug 19 | Cross-site scripting (XSS) vulnerability in the SWF panel in Apache OpenMeetings before 3.1.2 allows remote attackers to inject arbitrary web script or HTML via the swf parameter Affected: through 3.1.1 |
| CVE-2016-2163 | 6.1 | Apr 11 | Cross-site scripting (XSS) vulnerability in Apache OpenMeetings before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the event description when creating… Affected: through 3.1.0 |
| CVE-2023-28936 | 5.3 | May 12 | Attacker can access arbitrary recording/room Vendor: The Apache Software Foundation Versions Affected: Apache OpenMeetings from 2.0.0 before 7.1.0 Affected: 2.0.0 before 7.1.0 |
| CVE-2017-7685 | 5.3 | Jul 17 | Apache OpenMeetings 1.0.0 responds to the following insecure HTTP methods: PUT, DELETE, HEAD, and PATCH Affected: 1.0.0; 2.0; 2.1; 2.1.1; 2.2.0; 3.0.0; +15 more |
| CVE-2026-33005 | 4.3 | Apr 9 | Apache OpenMeetings: Insufficient checks in FileWebService Affected: 3.1.0 before 9.0.0 |
Showing 9