Skip to contentApache Software Foundation Openmeetings vulnerabilities
- apache openmeetingsApache OpenMeetings: Arbitrary File ReadCVE-2026-494886.5 Medium
- apache openmeetingsApache OpenMeetings: Insufficient checks in FileWebServiceCVE-2026-33005Fix available4.3 Medium
- apache openmeetingsApache OpenMeetings: Hardcoded Remember-Me Cookie Encryption Key and SaltCVE-2026-33266Fix available7.5 High
- apache openmeetingsApache OpenMeetings: Login Credentials Passed via GET Query ParametersCVE-2026-34020Fix available7.5 High
- apache openmeetingsApache OpenMeetings: Deserialisation of untrusted data in cluster modeCVE-2024-54676Fix availableEPSS 68.8%9.8 Critical
- apache openmeetingsApache OpenMeetings: insufficient check of invitation hashCVE-2023-28936Fix available5.3 Medium
- apache openmeetingsApache OpenMeetings: allows bypass authenticationCVE-2023-29032Fix available8.1 High
- apache openmeetingsApache OpenMeetings: allows null-byte InjectionCVE-2023-29246Fix available7.2 High
- apache openmeetingsApache OpenMeetings: allows user impersonationCVE-2023-28326Fix available9.8 Critical
- apache openmeetingsApache OpenMeetings: bandwidth can be overloaded with public web serviceCVE-2021-27576Fix available7.5 High
- apache openmeetingsDenial of service in Apache OpenMeetingsCVE-2020-13951Public exploitFix availableEPSS 68.6%7.5 High
- apache openmeetingsApache OpenMeetings may allow authenticated attacker to deny service for privileged usersCVE-2018-1286Fix available6.5 Medium
- apache openmeetingsApache OpenMeetings RCECVE-2016-8736Fix available9.8 Critical
- apache openmeetingsApache OpenMeetings updates user password in insecure mannerCVE-2017-7688Fix available7.5 High
- apache openmeetingsApache OpenMeetings responds to insecure HTTP methodsCVE-2017-7685Fix available5.3 Medium
- apache openmeetingsApache OpenMeetings vulnerable to Uncontrolled Resource ConsumptionCVE-2017-7684Fix available7.5 High
- apache openmeetingsApache OpenMeetings displays Tomcat version and detailed error stack traceCVE-2017-7683Fix available7.5 High
- apache openmeetingsApache OpenMeetings vulnerable to parameter manipulation attacksCVE-2017-7682Fix available8.2 High
- apache openmeetingsApache OpenMeetings vulnerable to SQL injectionCVE-2017-7681Fix available8.8 High
- apache openmeetingsApache OpenMeetings allows flash content to be loaded from untrusted domainsCVE-2017-7680Fix available7.5 High
- apache openmeetingsApache OpenMeetings has Inadequate Encryption StrengthCVE-2017-7673Fix available9.8 Critical
- apache openmeetingsApache OpenMeetings vulnerable to Cross-Site Request ForgeryCVE-2017-7666Fix available8.8 High
- apache openmeetingsApache OpenMeetings does not correctly validate uploaded XML documentsCVE-2017-7664Fix available10.0 Critical
- apache openmeetingsApache OpenMeetings Cross-site Scripting vulnerabilityCVE-2017-7663Fix available6.1 Medium