OP
Vendor
opencast
7
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-77615 | OP opencast opencast | 8.7 | Sep 17 | Paella Player: Stored XSS via caption cue text |
| CVE-2026-77614 | OP opencast opencast | 8.8 | Sep 17 | Opencast: Session fixation in login enables account takeover via crafted link |
| CVE-2025-61906 | OP opencast opencast | 4.3 | Oct 8 | Opencast's editor accidentally publishes videos/overwrites publications #1626 |
| CVE-2025-61788 | OP opencast opencast | 5.4 | Oct 8 | Opencast Paella Player 7 vulnerable to Cross-Site-Scripting |
| CVE-2025-55202 | OP opencast opencast | 5.3 | Aug 29 | Opencast has a partial path traversal vulnerability in UI config |
| CVE-2025-54380 | OP opencast opencast | 6.5 | Jul 26 | Opencast still publishes global system account credentials |
| CVE-2017-1000217 | OP Opencast Opencast | 8.8 | Nov 17 | Opencast 2.3.2 and older versions are vulnerable to script injections through media and metadata in the player and media module resulting in arbitrary code execution, fixed in… |