Known vulnerabilities in BigBlueButton - page 2

Software: BigBlueButton
Software CPE: cpe:2.3:a:blindsidenetworks:bigbluebutton:*:*:*:*:*:wordpress:*:*
Total vulnerabilities: 37
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting BigBlueButton BigBlueButton is affected by 37 known vulnerabilities: 18 medium, 19 low Critical High Medium Low

Vulnerabilities (37)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU70691 - Exposure of resource to wrong sphere
CVE-2022-23488
CWE-668 Medium
No
No
2.4 rc-6, 2.5 alpha-1 04.01.2023 SB2023010413
#VU70687 - Incorrect Authorization
CVE-2022-41962
CWE-863 Low
No
No
2.4 rc-6, 2.5 alpha-1 04.01.2023 SB2023010413
#VU70686 - Insufficient Verification of Data Authenticity
CVE-2022-41961
CWE-345 Low
No
No
2.4 rc-6, 2.5 alpha-1 04.01.2023 SB2023010413
#VU70450 - Insufficient Verification of Data Authenticity
CVE-2022-41960
CWE-345 Low
No
No
2.4.3 20.12.2022 SB2023010412
#VU131444 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-31064
CWE-79 Medium
No
No
2.4.8, 2.5.0 22.06.2022 SB2022060245
#VU131445 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-31065
CWE-79 Low
No
No
2.4.8, 2.5.0 22.06.2022 SB2022060245
#VU131446 - Resource exhaustion
CVE-2022-29169
CWE-400 Medium
No
No
2.3.19, 2.4.7, 2.5.0 02.06.2022 SB2022060245
#VU131759 - Improper Access Control
CVE-2022-29232
CWE-284 Low
No
No
2.3.9 02.06.2022 SB2022060246
#VU131447 - Improper Access Control
CVE-2022-29236
CWE-284 Low
No
No
2.3.18, 2.4 rc-6 02.06.2022 SB2022060143
#VU131449 - Improper Access Control
CVE-2022-29234
CWE-284 Low
No
No
2.3.18, 2.4.1 01.06.2022 SB2022060143
#VU131448 - Improper Access Control
CVE-2022-29235
CWE-284 Medium
No
No
2.3.18, 2.4 rc-6 01.06.2022 SB2022060143
#VU48705 - Improper Restriction of Excessive Authentication Attempts
CVE-2020-29042
CWE-307 Low
No
No
2.2.30 26.11.2020 SB2020113006
#VU48706 - Missing Authorization
CVE-2020-29043
CWE-862 Medium
No
No
2.2.30 26.11.2020 SB2020113006
#VU49251 - Server-Side Request Forgery (SSRF)
CVE-2020-28168
CWE-918 Medium
No
No
2.2.32 06.11.2020 SB2021010417
SB2021022518
SB2022061413
and 4 more
#VU27433 - Exposure of sensitive information to an unauthorized actor
CVE-2020-12443
CWE-200 Medium
No
No
2.2.6 29.04.2020 SB2020042916
#VU27390 - Exposure of sensitive information to an unauthorized actor
CVE-2020-12112
CWE-200 Medium
Available
No
2.2.5 28.04.2020 SB2020042820
#VU27387 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-12113
CWE-79 Low
No
No
2.2.4 28.04.2020 SB2020042817


Showing elements 21 - 40 out of 37