Apache Openmeetings vulnerabilities

• apache openmeetings Apache OpenMeetings: Arbitrary File Read CVE-2026-49488 6.5 MediumJuly 14, 2026
• apache openmeetings Apache OpenMeetings: Insufficient checks in FileWebService CVE-2026-33005 Fix available 4.3 MediumApril 9, 2026
• apache openmeetings Apache OpenMeetings: Hardcoded Remember-Me Cookie Encryption Key and Salt CVE-2026-33266 Fix available 7.5 HighApril 9, 2026
• apache openmeetings Apache OpenMeetings: Login Credentials Passed via GET Query Parameters CVE-2026-34020 Fix available 7.5 HighApril 9, 2026
• apache openmeetings Apache OpenMeetings: Deserialisation of untrusted data in cluster mode CVE-2024-54676 Fix available EPSS 68.8% 9.8 CriticalJanuary 8, 2025
• apache openmeetings Apache OpenMeetings: insufficient check of invitation hash CVE-2023-28936 Fix available 5.3 MediumMay 12, 2023
• apache openmeetings Apache OpenMeetings: allows bypass authentication CVE-2023-29032 Fix available 8.1 HighMay 12, 2023
• apache openmeetings Apache OpenMeetings: allows null-byte Injection CVE-2023-29246 Fix available 7.2 HighMay 12, 2023
• apache openmeetings Apache OpenMeetings: allows user impersonation CVE-2023-28326 Fix available 9.8 CriticalMarch 28, 2023
• apache openmeetings Apache OpenMeetings: bandwidth can be overloaded with public web service CVE-2021-27576 Fix available 7.5 HighMarch 15, 2021
• apache openmeetings Denial of service in Apache OpenMeetings CVE-2020-13951 Public exploitFix available EPSS 68.6% 7.5 HighSeptember 30, 2020
• apache openmeetings Apache OpenMeetings may allow authenticated attacker to deny service for privileged users CVE-2018-1286 Fix available 6.5 MediumFebruary 28, 2018
• apache openmeetings Apache OpenMeetings RCE CVE-2016-8736 Fix available 9.8 CriticalOctober 12, 2017
• apache openmeetings Apache OpenMeetings updates user password in insecure manner CVE-2017-7688 Fix available 7.5 HighJuly 14, 2017
• apache openmeetings Apache OpenMeetings responds to insecure HTTP methods CVE-2017-7685 Fix available 5.3 MediumJuly 14, 2017
• apache openmeetings Apache OpenMeetings vulnerable to Uncontrolled Resource Consumption CVE-2017-7684 Fix available 7.5 HighJuly 14, 2017
• apache openmeetings Apache OpenMeetings displays Tomcat version and detailed error stack trace CVE-2017-7683 Fix available 7.5 HighJuly 14, 2017
• apache openmeetings Apache OpenMeetings vulnerable to parameter manipulation attacks CVE-2017-7682 Fix available 8.2 HighJuly 14, 2017
• apache openmeetings Apache OpenMeetings vulnerable to SQL injection CVE-2017-7681 Fix available 8.8 HighJuly 14, 2017
• apache openmeetings Apache OpenMeetings allows flash content to be loaded from untrusted domains CVE-2017-7680 Fix available 7.5 HighJuly 14, 2017
• apache openmeetings Apache OpenMeetings has Inadequate Encryption Strength CVE-2017-7673 Fix available 9.8 CriticalJuly 14, 2017
• apache openmeetings Apache OpenMeetings vulnerable to Cross-Site Request Forgery CVE-2017-7666 Fix available 8.8 HighJuly 14, 2017
• apache openmeetings Apache OpenMeetings does not correctly validate uploaded XML documents CVE-2017-7664 Fix available 10.0 CriticalJuly 14, 2017
• apache openmeetings Apache OpenMeetings Cross-site Scripting vulnerability CVE-2017-7663 Fix available 6.1 MediumJuly 14, 2017
• apache openmeetings Apache OpenMeetings Cross-site Scripting vulnerability CVE-2016-3089 Fix available 6.1 MediumAugust 19, 2016
• apache openmeetings Apache OpenMeetings allows remote attackers to read arbitrary files by attempting to upload a file CVE-2016-2164 Fix available 7.5 HighApril 11, 2016
• apache openmeetings Apache OpenMeetings Cross-site Scripting vulnerability CVE-2016-2163 Fix available 6.1 MediumApril 11, 2016
• apache openmeetings Apache OpenMeetings Directory Traversal vulnerability CVE-2016-0784 Public exploitFix available EPSS 54.7% 6.5 MediumApril 11, 2016
• apache openmeetings The sendHashByUser function in Apache OpenMeetings before 3.1.1 generates predictable password... CVE-2016-0783 7.5 HighApril 11, 2016