What’s Vulnerable › Products

Apache Software Foundation Apache OpenMeetings vulnerabilities

29 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your Apache Software Foundation Apache OpenMeetings version is affected

Latest Apache Software Foundation Apache OpenMeetings vulnerabilities

• CVE-2026-49488 — Apache OpenMeetings: Arbitrary File Read (CVSS 6.5)
• CVE-2026-34020 — Apache OpenMeetings: Login Credentials Passed via GET Query Parameters (CVSS 7.5)
• CVE-2026-33266 — Apache OpenMeetings: Hardcoded Remember-Me Cookie Encryption Key and Salt (CVSS 7.5)
• CVE-2026-33005 — Apache OpenMeetings: Insufficient checks in FileWebService (CVSS 4.3)
• CVE-2024-54676 — Apache OpenMeetings: Deserialisation of untrusted data in cluster mode (CVSS 9.8)
• CVE-2023-29246 — Apache OpenMeetings: allows null-byte Injection (CVSS 7.2)
• CVE-2023-29032 — Apache OpenMeetings: allows bypass authentication (CVSS 8.1)
• CVE-2023-28936 — Apache OpenMeetings: insufficient check of invitation hash (CVSS 5.3)
• CVE-2023-28326 — Apache OpenMeetings: allows user impersonation (CVSS 9.8)
• CVE-2021-27576 — Apache OpenMeetings: bandwidth can be overloaded with public web service (CVSS 7.5)
• CVE-2020-13951 — (CVSS 7.5)
• CVE-2018-1286 — (CVSS 6.5)
• CVE-2016-8736 — (CVSS 9.8)
• CVE-2017-7688 — (CVSS 7.5)
• CVE-2017-7685 — (CVSS 5.3)
• CVE-2017-7684 — (CVSS 7.5)
• CVE-2017-7683 — (CVSS 7.5)
• CVE-2017-7682 — (CVSS 8.2)
• CVE-2017-7681 — (CVSS 8.8)
• CVE-2017-7680 — (CVSS 7.5)
• CVE-2017-7673 — (CVSS 9.8)
• CVE-2017-7666 — (CVSS 8.8)
• CVE-2017-7664 — (CVSS 10.0)
• CVE-2017-7663 — (CVSS 6.1)
• CVE-2016-3089 — (CVSS 6.1)