Apache OpenMeetings

5 results · Clear filters · Feed

• Critical 9.8
  CVE-2024-54676 EPSS 69%

  Apache OpenMeetings: Deserialisation of untrusted data in cluster mode

  Vendor: The Apache Software Foundation Versions Affected: Apache OpenMeetings from 2.1.0 before 8.0.0 Description: Default clustering instructions at https://openmeetings.apache.org/Clustering.html  doesn't specify white/black lists for OpenJPA this leads to …

  Apache Software Foundation Apache OpenMeetings org.apache.openmeetings:openmeetings-parent Maven
  Jan 8, 2025
• Critical 9.8
  CVE-2023-28326

  Apache OpenMeetings: allows user impersonation

  Vendor: The Apache Software Foundation Versions Affected: Apache OpenMeetings from 2.0.0 before 7.0.0 Description: Attacker can elevate their privileges in any room

  Apache Software Foundation Apache OpenMeetings org.apache.openmeetings:openmeetings-parent Maven
  Mar 28, 2023
• Critical 9.8
  CVE-2016-8736

  Apache OpenMeetings RCE

  Apache OpenMeetings before 3.1.2 is vulnerable to Remote Code Execution via RMI deserialization attack.

  Apache Software Foundation Apache OpenMeetings org.apache.openmeetings:openmeetings-parent Maven
  Oct 12, 2017
• Critical 9.8
  CVE-2017-7673

  Apache OpenMeetings has Inadequate Encryption Strength

  Apache OpenMeetings 1.0.0 uses not very strong cryptographic storage, captcha is not used in registration and forget password dialogs and auth forms missing brute force protection.

  Apache Software Foundation Apache OpenMeetings org.apache.openmeetings:openmeetings-parent Maven
  Jul 14, 2017
• Critical 10.0
  CVE-2017-7664

  Apache OpenMeetings does not correctly validate uploaded XML documents

  Uploaded XML documents were not correctly validated in Apache OpenMeetings 3.1.0.

  Apache Software Foundation Apache OpenMeetings org.apache.openmeetings:openmeetings-parent Maven
  Jul 14, 2017