Bigbluebutton
Approved changes feed: RSS · Atom
cpe:2.3:a:bigbluebutton:bigbluebutton:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Bigbluebutton (67de7263-3aa7-53b7-b8c9-b6d6bd69b5a3) |
|---|---|
| Product | Bigbluebutton (a9054be0-06c4-5a84-8fa2-7200407c65ba) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/bigbluebutton/bigbluebutton |
purl2cpe | 2026-06-01 10:18:08.172724 |
pkg:sourceforge/bigbluebutton |
purl2cpe | 2026-06-01 10:18:08.172726 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-46404 |
vulnerable | 2026-07-29 00:54:58.887019 |
BigBlueButton: Presentation URL Security Hardening
MEDIUM (6.8)
BigBlueButton is an open-source virtual classroom. Prior to 3.0.23, the presentation URL validation did not properly restrict access to site local and link local addresses. The redirect following logic now pins resolved IPs. This issue is fixed in version 3.0.23.
Published: 2026-07-16T18:04:11.116Z
Updated: 2026-07-17T18:06:48.388Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-46353 |
vulnerable | 2026-07-29 00:54:58.840887 |
BigBlueButton API checksum bypass via presentationUploadExternalUrl
HIGH (8.1)
BigBlueButton is an open-source virtual classroom. Prior to 3.0.21, bbb-web checksum validation could be bypassed when a presentationUploadExternalUrl parameter was supplied to API request handling in CreateMeeting.java and ValidationService.java, allowing a user to send valid requests to some endpoints without a checksum. This issue is fixed in version 3.0.21.
Published: 2026-07-16T18:06:54.645Z
Updated: 2026-07-16T18:41:31.957Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-46351 |
vulnerable | 2026-07-29 00:54:58.840561 |
BigBlueButton: Insecure Randomness allows to guess user's conference session token and impersonate them
HIGH (8.1)
BigBlueButton is an open-source virtual classroom. Prior to 3.0.21, bbb-web generated conference sessionToken values with insufficiently secure randomness in bbb-common-web/src/main/java/org/bigbluebutton/api/Util.java and bigbluebutton-web/grails-app/controllers/org/bigbluebutton/web/controllers/ApiController.groovy, allowing a session user to predict other users' conference session tokens and impersonate them. This issue is fixed in version 3.0.21.
Published: 2026-07-16T17:58:53.070Z
Updated: 2026-07-17T13:59:11.141Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-41127 |
vulnerable | 2026-06-08 08:03:14.914566 |
BigBlueButton's missing authorization allows viewer to inject/overwrite captions
MEDIUM (6.5)
BigBlueButton is an open-source virtual classroom. Versions prior to 3.0.24 have a missing authorization that allows viewers to inject/overwrite captions Version 3.0.24 tightened the permissions on who is able to submit captions. No known workarounds are available.
Published: 2026-04-21T23:24:46.671Z
Updated: 2026-04-22T13:12:52.166Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-41126 |
vulnerable | 2026-06-08 08:03:14.914168 |
BigBlueButton has Open Redirect through bigbluebutton/api/join via get-parameter "logoutURL"
MEDIUM (4.3)
BigBlueButton is an open-source virtual classroom. Versions prior to 3.0.24 have an Open Redirect through bigbluebutton/api/join via get-parameter "logoutURL." Version 3.0.24 has adjusted the handling of requests with incorrect checksum so that the default logoutURL is used. No known workarounds are available.
Published: 2026-04-21T23:22:34.575Z
Updated: 2026-04-22T14:16:24.217Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-27737 |
vulnerable | 2026-06-08 07:53:22.918821 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-27736 |
vulnerable | 2026-06-08 07:53:22.918525 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-27467 |
vulnerable | 2026-06-08 07:53:22.347221 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-27466 |
vulnerable | 2026-06-08 07:53:22.346748 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-61602 |
vulnerable | 2026-06-08 07:37:27.625538 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-61601 |
vulnerable | 2026-06-08 07:37:27.625095 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55200 |
vulnerable | 2026-06-08 07:33:14.355359 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39302 |
vulnerable | 2026-06-08 06:41:49.021686 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-38518 |
vulnerable | 2026-06-08 06:41:47.616798 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-43798 |
vulnerable | 2026-06-08 06:12:38.041509 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-43797 |
vulnerable | 2026-06-08 06:12:38.037210 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-42804 |
vulnerable | 2026-06-08 06:11:09.524970 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-42803 |
vulnerable | 2026-06-08 06:11:09.520223 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-33176 |
vulnerable | 2026-06-08 06:06:21.927622 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-41964 |
vulnerable | 2026-06-08 05:49:28.991523 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-41963 |
vulnerable | 2026-06-08 05:49:28.991085 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-41962 |
vulnerable | 2026-06-08 05:49:28.989953 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-41961 |
vulnerable | 2026-06-08 05:49:28.981339 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-41960 |
vulnerable | 2026-06-08 05:49:28.980685 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31065 |
vulnerable | 2026-06-08 05:43:40.099232 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31064 |
vulnerable | 2026-06-08 05:43:40.089642 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29236 |
vulnerable | 2026-06-08 05:42:47.389872 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29235 |
vulnerable | 2026-06-08 05:42:47.385455 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29234 |
vulnerable | 2026-06-08 05:42:47.385012 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29233 |
vulnerable | 2026-06-08 05:42:47.381456 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29232 |
vulnerable | 2026-06-08 05:42:47.379377 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29169 |
vulnerable | 2026-06-08 05:42:47.259298 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-27238 |
vulnerable | 2026-06-08 05:41:55.064301 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-23490 |
vulnerable | 2026-06-08 05:40:57.630227 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-23488 |
vulnerable | 2026-06-08 05:40:57.622147 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-4143 |
vulnerable | 2026-06-08 05:38:08.505673 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-29043 |
vulnerable | 2026-06-08 05:24:57.421399 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-29042 |
vulnerable | 2026-06-08 05:24:57.420674 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-28954 |
vulnerable | 2026-06-08 05:23:56.664639 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-28953 |
vulnerable | 2026-06-08 05:23:56.664162 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-27613 |
vulnerable | 2026-06-08 05:23:52.814255 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-27612 |
vulnerable | 2026-06-08 05:23:52.813893 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-27611 |
vulnerable | 2026-06-08 05:23:52.813526 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-27610 |
vulnerable | 2026-06-08 05:23:52.813036 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-27609 |
vulnerable | 2026-06-08 05:23:52.812764 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-27608 |
vulnerable | 2026-06-08 05:23:52.812382 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-27607 |
vulnerable | 2026-06-08 05:23:52.811997 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-27606 |
vulnerable | 2026-06-08 05:23:52.811498 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-27605 |
vulnerable | 2026-06-08 05:23:52.805729 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-27604 |
vulnerable | 2026-06-08 05:23:52.805343 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-27603 |
vulnerable | 2026-06-08 05:23:52.805025 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-27602 |
vulnerable | 2026-06-08 05:23:52.804480 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-27601 |
vulnerable | 2026-06-08 05:23:52.804174 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-25820 |
vulnerable | 2026-06-08 05:23:49.473509 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-12443 |
vulnerable | 2026-06-08 05:17:58.192898 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-12113 |
vulnerable | 2026-06-08 05:17:56.514494 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-12112 |
vulnerable | 2026-06-08 05:17:56.514026 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.