Known vulnerabilities in BigBlueButton - page 2

Software: BigBlueButton
Software CPE: cpe:2.3:a:blindsidenetworks:bigbluebutton:*:*:*:*:*:wordpress:*:*
Total vulnerabilities: 43
Public exploits: 3
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting BigBlueButton BigBlueButton is affected by 43 known vulnerabilities: 24 medium, 19 low Critical High Medium Low

Vulnerabilities (43)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU125911 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2026-27736
CWE-601 Low
No
No
3.0.20 14.04.2026 SB2026022021
#VU123109 - Improper input validation
CVE-2026-27466
CWE-20 Medium
No
No
3.0.22 20.02.2026 SB2026022022
#VU123108 - Exposure of sensitive information to an unauthorized actor
CVE-2026-27467
CWE-200 Low
No
No
3.0.20 20.02.2026 SB2026022021
#VU116905 - Improper Check or Handling of Exceptional Conditions
CVE-2025-61601
CWE-703 Medium
Available
No
3.0.13 10.10.2025 SB2025101036
#VU116904 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-55200
CWE-79 Low
No
No
3.0.13 10.10.2025 SB2025101036
#VU116903 - Resource exhaustion
CVE-2025-61602
CWE-400 Medium
Available
No
3.0.13 10.10.2025 SB2025101036
#VU82584 - Server-Side Request Forgery (SSRF)
CVE-2023-43798
CWE-918 Medium
No
No
2.6.12, 2.7.0 rc.1 31.10.2023 SB2023103130
#VU82582 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-42804
CWE-22 Low
No
No
2.6.0 31.10.2023 SB2023103128
#VU82581 - Unrestricted Upload of File with Dangerous Type
CVE-2023-42803
CWE-434 Medium
No
No
2.6.0 31.10.2023 SB2023103128
#VU82579 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-43797
CWE-79 Low
No
No
2.6.11, 2.7.0 beta.3 31.10.2023 SB2023103129
#VU70691 - Exposure of resource to wrong sphere
CVE-2022-23488
CWE-668 Medium
No
No
2.4 rc-6, 2.5 alpha-1 04.01.2023 SB2023010413
#VU70690 - Incorrect Authorization
CVE-2022-23490
CWE-863 Medium
No
No
2.4.0 04.01.2023 SB2023010416
#VU70689 - Exposure of sensitive information to an unauthorized actor
CVE-2022-41964
CWE-200 Medium
No
No
2.4.0, 2.5 alpha-1 04.01.2023 SB2023010415
#VU70688 - Improper preservation of permissions
CVE-2022-41963
CWE-281 Low
No
No
2.4.3, 2.5 alpha-1 04.01.2023 SB2023010414
#VU70687 - Incorrect Authorization
CVE-2022-41962
CWE-863 Low
No
No
2.4 rc-6, 2.5 alpha-1 04.01.2023 SB2023010413
#VU70686 - Insufficient Verification of Data Authenticity
CVE-2022-41961
CWE-345 Low
No
No
2.4 rc-6, 2.5 alpha-1 04.01.2023 SB2023010413
#VU70450 - Insufficient Verification of Data Authenticity
CVE-2022-41960
CWE-345 Low
No
No
2.4.3 20.12.2022 SB2023010412
#VU48705 - Improper Restriction of Excessive Authentication Attempts
CVE-2020-29042
CWE-307 Low
No
No
2.2.30 26.11.2020 SB2020113006
#VU48706 - Missing Authorization
CVE-2020-29043
CWE-862 Medium
No
No
2.2.30 26.11.2020 SB2020113006
#VU49251 - Server-Side Request Forgery (SSRF)
CVE-2020-28168
CWE-918 Medium
No
No
2.2.32 06.11.2020 SB2021010417
SB2021022518
SB2022061413
and 4 more


Showing elements 21 - 40 out of 43