Vulnerabilidades en bigbluebutton
42 resultadosCVE-2023-33176MEDIUMBlind SSRF When Uploading Presentation in BigBlueButtonEPSS 0.5%CVE-2023-43797MEDIUMBigBlueButton Stored Cross-site Scripting vulnerability at Guest LobbyEPSS 0.5%CVE-2026-46351HIGHBigBlueButton: Insecure Randomness allows to guess user's conference session token and impersonate themEPSS 0.5%CVE-2024-39302LOWSome bbb-record-core files installed with wrong file permissionEPSS 0.5%CVE-2022-41963LOWBigBlueButton contains Improper Preservation of Permissions for whiteboardEPSS 0.5%CVE-2026-27466HIGHBigBlueButton: Exposed ClamAV port enables Denial of ServiceEPSS 0.5%CVE-2026-46404MEDIUMBigBlueButton: Presentation URL Security HardeningEPSS 0.4%CVE-2022-36029CRITICALBigBlueButton Greenlight Open Redirect vulnerabilityEPSS 0.4%CVE-2025-61602HIGHBigBlueButton vulnerable to Chat DoS via invalid reactionEmojiIdEPSS 0.4%CVE-2022-41960MEDIUMBigBlueButton contains DoS via failed authToken validationEPSS 0.4%CVE-2026-46355HIGHBigBlueButton: Unauthenticated Session Hijack via Exposed /bigbluebutton/api/handleJoinExistingUserEPSS 0.4%CVE-2022-36028CRITICALBigBlueButton Greenlight Open Redirect vulnerabilityEPSS 0.4%CVE-2026-55489MEDIUMBigBlueButton: IDOR on BBB through /api/graphql via POST parameter "presentationId" leads to Authentication BypassEPSS 0.3%CVE-2024-38518MEDIUMbbb-web API additional parameters consideredEPSS 0.3%CVE-2022-41961MEDIUMBigBlueButton subject to Ineffective user bansEPSS 0.3%CVE-2026-55491MEDIUMBigBlueButton: Stored XSS in Screenshare Recording Playback via Unescaped Meeting NameEPSS 0.3%CVE-2026-27737MEDIUMBigBlueButton has Stored XSS in bbb-playback replayEPSS 0.3%CVE-2025-55200HIGHBigBlueButton vulnerable to Stored XSS via name of user at Shared NotesEPSS 0.2%CVE-2026-41126MEDIUMBigBlueButton has Open Redirect through bigbluebutton/api/join via get-parameter "logoutURL"EPSS 0.2%CVE-2026-27467LOWBigBlueButton: Audio from participants to the server initially unmutedEPSS 0.2%