GCVE - cpe:2.3:a:apache:openmeetings:2.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:apache:openmeetings:2.0:*:*:*:*:*:*:*

part: a version: 2.0 update: *

Vendor	Apache (`b0303047-b7dd-5cf8-abcc-71b7d9d80b95`)
Product	Openmeetings (`6384b10a-0213-5c20-b422-f8a7e22e933b`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:apache/openmeetings`	purl2cpe	2026-06-01 10:14:32.753433
`pkg:docker/apache/openmeetings`	purl2cpe	2026-06-01 10:14:32.753434
`pkg:github/apache/openmeetings`	purl2cpe	2026-06-01 10:14:32.753435
`pkg:maven/org.apache.openmeetings/openmeetings-parent`	purl2cpe	2026-06-01 10:14:32.753437

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-7688`	vulnerable	2026-06-08 05:10:05.895694	Details available Apache OpenMeetings 1.0.0 updates user password in insecure manner. Published: 2017-07-14T15:00:00.000Z Updated: 2024-09-17T03:02:48.446Z Open on db.gcve.eu Reference links http://markmail.org/message/ctsiiqtekzsun6fi http://www.securityfocus.com/bid/99586	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-7685`	vulnerable	2026-06-08 05:10:05.870624	Details available Apache OpenMeetings 1.0.0 responds to the following insecure HTTP methods: PUT, DELETE, HEAD, and PATCH. Published: 2017-07-14T15:00:00.000Z Updated: 2024-09-16T16:59:04.257Z Open on db.gcve.eu Reference links http://markmail.org/message/uxk4bpq35svnyjhb http://www.securityfocus.com/bid/99592	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-7684`	vulnerable	2026-06-08 05:10:05.869445	Details available Apache OpenMeetings 1.0.0 doesn't check contents of files being uploaded. An attacker can cause a denial of service by uploading multiple large files to the server. Published: 2017-07-14T15:00:00.000Z Updated: 2024-09-17T03:18:54.640Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/99584 http://markmail.org/message/v6dpmrdd6cgg66up	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-7683`	vulnerable	2026-06-08 05:10:05.868271	Details available Apache OpenMeetings 1.0.0 displays Tomcat version and detailed error stack trace, which is not secure. Published: 2017-07-14T15:00:00.000Z Updated: 2024-09-16T18:33:49.648Z Open on db.gcve.eu Reference links http://markmail.org/message/hint6fp66lijqdvu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-7681`	vulnerable	2026-06-08 05:10:05.867093	Details available Apache OpenMeetings 1.0.0 is vulnerable to SQL injection. This allows authenticated users to modify the structure of the existing query and leak the structure of other queries being made by the application in the back-end. Published: 2017-07-14T15:00:00.000Z Updated: 2024-09-16T18:39:15.972Z Open on db.gcve.eu Reference links http://markmail.org/message/j774dp5ro5xmkmg6	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-7680`	vulnerable	2026-06-08 05:10:05.865997	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-7673`	vulnerable	2026-06-08 05:10:05.783329	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-7666`	vulnerable	2026-06-08 05:10:05.735262	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.