返回 CVE 浏览器

CVE-2016-8736

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.1300%

EPSS Percentile44.60th

Published2017年10月12日

Last Modified2026年5月13日

Vulnerability Description

Apache OpenMeetings before 3.1.2 is vulnerable to Remote Code Execution via RMI deserialization attack.

Affected Platforms (CPE)

📦

Apache

Openmeetings

< 3.1.2

References & Advisories

🔗 http://openmeetings.markmail.org/thread/tr47byaaopnemvne

🔗 http://www.securityfocus.com/bid/94145

🔗 http://openmeetings.markmail.org/thread/tr47byaaopnemvne

🔗 http://www.securityfocus.com/bid/94145

相关漏洞威胁

CVE-2017-766410.0

Uploaded XML documents were not correctly validated in Apache OpenMeetings 3.1.0.

CVE-2017-76739.8

Apache OpenMeetings 1.0.0 uses not very strong cryptographic storage, captcha is not used in registration and forget password dial...

CVE-2017-76668.8

Apache OpenMeetings 1.0.0 is vulnerable to Cross-Site Request Forgery (CSRF) attacks, XSS attacks, click-jacking, and MIME based a...

CVE-2017-76818.8

Apache OpenMeetings 1.0.0 is vulnerable to SQL injection. This allows authenticated users to modify the structure of the existing ...