CVE-2017-7664

Uploaded XML documents were not correctly validated in Apache OpenMeetings 3.1.0...

CVE-2017-7685

Apache OpenMeetings 1.0.0 is reported to respond to insecure HTTP methods (PUT, DELETE, HEAD, PATCH). The available connected sources confirm this behavior but do not provide concrete details on root cause, affected versions beyond 1.0.0, exploit scenarios, or remediation steps. No fixes or mitig...

CVE-2017-7688

Apache OpenMeetings 1.0.0 is affected by an insecure password update vulnerability described as updating user passwords in an insecure manner. Multiple connected sources (NVD entry CVE-2017-7688; GHSA-XHJ7-JR45-5W8R; OSV and OpenVAS entries) confirm the issue and indicate it affects OpenMeetings ...

Denial Of Service (DoS)

openmeetings-db is vulnerable to denial of service DoS attacks. The library does not properly restrict the size of files that can be uploaded, allowing a malicious user to upload multiple large files to the server to exhaust its resources...

Apache OpenMeetings Cross-Site Scripting Vulnerability (CNVD-2017-23479)

Apache OpenMeetings is audio and video conferencing software. Apache OpenMeetings suffers from a cross-site scripting vulnerability in its implementation, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to gain access to...

Apache OpenMeetings Security Restriction Bypass Vulnerability

Apache OpenMeetings is audio and video conferencing software. A security restriction bypass vulnerability exists in Apache OpenMeetings, which could be exploited by remote attackers to submit a special request to bypass certain security restrictions and perform an unauthorized operation...

Apache OpenMeetings XML External Entity Injection Vulnerability

Apache OpenMeetings is audio and video conferencing software. Apache OpenMeetings suffers from an XML external entity injection vulnerability in its implementation, which could be exploited by a remote attacker to submit a specially crafted XML request, obtain sensitive information, or conduct a...

Apache OpenMeetings Denial of Service Vulnerability

Apache OpenMeetings is audio and video conferencing software. Apache OpenMeetings checks for security vulnerabilities in the content of uploaded files, allowing remote attackers to exploit the vulnerability to submit special multiple files for denial of service attacks...

Missing Secure Headers

openmeetings-db is vulnerable to missing secure headers. The library does not use secure HTTP headers, allowing a malicious user to conduct various attacks such as clickjacking...

Red5 Server Apache Commons Collections Insecure Deserialization

An insecure deserialization vulnerability has been reported in Red5 web server that is part of Apache OpenMeetings application. This vulnerability is due to the inclusion of the vulnerable version of Apache Commons Collections library in the classpath combined with insecure deserialization...

Apache OpenMeetings Remote Code Execution Vulnerability

Apache OpenMeetings is the United States Apache Apache Software Foundation developed a set of multi-language customizable video conferencing and collaboration system, which supports audio, video and allows users to view each participant's desktop and so on. A remote code execution vulnerability...

Apache OpenMeetings Event Description Cross-Site Scripting (CVE-2016-2163)

A cross-site scripting vulnerability has been reported in the event handling component of Apache OpenMeetings. The vulnerability is due to insufficient validation of input for event descriptions. A remote, authenticated attacker could exploit this vulnerability by scheduling an event with a craft...

Apache OpenMeetings < 3.1.2 Multiple Vulnerabilities - Active Check

Apache OpenMeetings is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:openmeetings"; i...

Apache OpenMeetings Detection (HTTP)

HTTP based detection of Apache OpenMeetings. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-3089

Cross-site scripting XSS vulnerability in the SWF panel in Apache OpenMeetings before 3.1.2 allows remote attackers to inject arbitrary web script or HTML via the swf parameter...

CVE-2016-3089

Cross-site scripting XSS vulnerability in the SWF panel in Apache OpenMeetings before 3.1.2 allows remote attackers to inject arbitrary web script or HTML via the swf parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in the SWF panel in Apache OpenMeetings before 3.1.2 allows remote attackers to inject arbitrary web script or HTML via the swf parameter...

CVE-2016-3089

CVE-2016-3089 affects Apache OpenMeetings (SWF panel). The vulnerability arises from insufficient input filtering of the swf parameter, enabling cross-site scripting (XSS). Affected version line is OpenMeetings before 3.1.2; exploitation would allow remote injection of script/HTML via the swf par...

CVE-2016-3089

Cross-site scripting XSS vulnerability in the SWF panel in Apache OpenMeetings before 3.1.2 allows remote attackers to inject arbitrary web script or HTML via the swf parameter...

Apache OpenMeetings Cross-Site Scripting Vulnerability (CNVD-2016-06335)

Apache OpenMeetings is the United States Apache Apache Software Foundation developed a set of multi-language customizable video conferencing and collaboration system, which supports audio, video and allows users to view each participant's desktop and so on. A cross-site scripting vulnerability...