All products

org.apache.openmeetings:openmeetings-parent

Maven · Package
25 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Apache OpenMeetings Uses GET Request Method With Sensitive Query Strings CVE-2026-34020 · GHSA-GCVM-C75M-H4P4 org.apache.openmeetings:openmeetings-parent Maven High Fix reported
Apache OpenMeetings has an Improper Handling of Insufficient Privileges vulnerabilityCVE-2026-33005 · GHSA-78CG-FC6C-W44W org.apache.openmeetings:openmeetings-parent Maven Medium Fix reported
Apache OpenMeetings Uses Hard-coded Cryptographic KeyCVE-2026-33266 · GHSA-WQXQ-W68R-WG85 org.apache.openmeetings:openmeetings-parent Maven High Fix reported
Apache OpenMeetings vulnerable to Deserialization of Untrusted Data CVE-2024-54676 · GHSA-MJF9-4PCV-VFG7 org.apache.openmeetings:openmeetings-parent Maven Critical Fix reported
Apache OpenMeetings responds to insecure HTTP methodsCVE-2017-7685 · GHSA-2C3P-9J5F-33G3 org.apache.openmeetings:openmeetings-parent Maven Medium Fix reported
Apache OpenMeetings allows flash content to be loaded from untrusted domainsCVE-2017-7680 · GHSA-Q52R-G8JF-WV3X org.apache.openmeetings:openmeetings-parent Maven High Fix reported
Apache OpenMeetings updates user password in insecure mannerCVE-2017-7688 · GHSA-XHJ7-JR45-5W8R org.apache.openmeetings:openmeetings-parent Maven High Fix reported
Apache OpenMeetings vulnerable to parameter manipulation attacksCVE-2017-7682 · GHSA-2Q65-XXG6-3QH5 org.apache.openmeetings:openmeetings-parent Maven High Fix reported
Apache OpenMeetings vulnerable to remote code execution via null-bye injectionCVE-2023-29246 · GHSA-MG5H-F3Q8-C96G org.apache.openmeetings:openmeetings-parent Maven High Fix reported
Apache OpenMeetings Improper Authentication vulnerabilityCVE-2023-29032 · GHSA-V9RM-7RV9-R3FW org.apache.openmeetings:openmeetings-parent Maven High Fix reported
Apache OpenMeetings missing authentication and can allow user impersonation CVE-2023-28326 · GHSA-3R48-3M8R-4R9W org.apache.openmeetings:openmeetings-parent Maven Critical Fix reported
Uncontrolled Resource Consumption in Apache OpenMeetings serverCVE-2021-27576 · GHSA-PX9F-597F-WMCF org.apache.openmeetings:openmeetings-parent Maven High Fix reported
Denial of service in Apache OpenMeetingsCVE-2020-13951 · GHSA-G37Q-26QX-8V2M org.apache.openmeetings:openmeetings-parent Maven High Fix reported
Apache OpenMeetings may allow authenticated attacker to deny service for privileged usersCVE-2018-1286 · GHSA-CV9J-7Q4X-V2G2 org.apache.openmeetings:openmeetings-parent Maven Medium Fix reported
Apache OpenMeetings displays Tomcat version and detailed error stack traceCVE-2017-7683 · GHSA-4V67-WG88-37P9 org.apache.openmeetings:openmeetings-parent Maven High Fix reported
Apache OpenMeetings vulnerable to SQL injectionCVE-2017-7681 · GHSA-335G-XCJH-GHC2 org.apache.openmeetings:openmeetings-parent Maven High Fix reported
Apache OpenMeetings has Inadequate Encryption StrengthCVE-2017-7673 · GHSA-CQM6-HRGQ-6869 org.apache.openmeetings:openmeetings-parent Maven Critical Fix reported
Apache OpenMeetings vulnerable to Uncontrolled Resource ConsumptionCVE-2017-7684 · GHSA-G3VQ-F35V-VHGM org.apache.openmeetings:openmeetings-parent Maven High Fix reported
Apache OpenMeetings vulnerable to Cross-Site Request ForgeryCVE-2017-7666 · GHSA-M5PM-RGVF-VG22 org.apache.openmeetings:openmeetings-parent Maven High Fix reported
Apache OpenMeetings does not correctly validate uploaded XML documentsCVE-2017-7664 · GHSA-67Q3-GWWW-PM4G org.apache.openmeetings:openmeetings-parent Maven Critical Fix reported