Known vulnerabilities in Apache OpenMeetings

Software CPE: cpe:2.3:a:apache_foundation:openmeetings:*:*:*:*:*:*:*:*
Total vulnerabilities: 12
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Apache OpenMeetings Apache OpenMeetings is affected by 12 known vulnerabilities: 7 medium, 5 low Critical High Medium Low

Vulnerabilities (12)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU145315 - Information Exposure Through Query Strings in GET Request
CVE-2026-34020
CWE-598 Low
No
No
9.0.0 25.08.2026 SB20260825103
#VU145314 - Use of Hard-coded Credentials
CVE-2026-33266
CWE-798 Low
No
No
9.0.0 25.08.2026 SB20260825103
#VU145313 - Improper Authorization
CVE-2026-33005
CWE-285 Low
No
No
9.0.0 25.08.2026 SB20260825103
#VU145202 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-49488
CWE-22 Low
No
No
9.1.0 25.08.2026 SB2026082563
#VU114346 - Command injection
CVE-2025-7962
CWE-77 Medium
No
No
8.1.0 21.08.2025 SB2025082145
SB2025082146
SB2025082147
and 57 more
#VU103273 - Deserialization of Untrusted Data
CVE-2024-54676
CWE-502 Medium
No
No
8.0.0 24.01.2025 SB2025012406
#VU76050 - Improper Access Control
CVE-2023-28936
CWE-284 Medium
No
No
7.1.0 12.05.2023 SB2023051207
#VU76049 - Permissions, Privileges, and Access Controls
CVE-2023-29032
CWE-264 Medium
No
No
7.1.0 12.05.2023 SB2023051207
#VU76048 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-29246
CWE-94 Low
No
No
7.1.0 12.05.2023 SB2023051207
#VU74217 - Improper Authentication
CVE-2023-28326
CWE-287 Medium
No
No
7.0.0 30.03.2023 SB2023033063
#VU51501 - Improper input validation
CVE-2021-27576
CWE-20 Medium
No
No
6.0.0 16.03.2021 SB2021031612
#VU47129 - Resource Management Errors
CVE-2020-13951
CWE-399 Medium
Available
No
5.0.1 28.09.2020 SB2020092811