Vulnerabilities in bigbluebutton
35 resultsCVE-2022-41963LOWBigBlueButton contains Improper Preservation of Permissions for whiteboardEPSS 0.4%CVE-2022-36029CRITICALBigBlueButton Greenlight Open Redirect vulnerabilityEPSS 0.4%CVE-2026-27466HIGHBigBlueButton: Exposed ClamAV port enables Denial of ServiceEPSS 0.4%CVE-2023-33176MEDIUMBlind SSRF When Uploading Presentation in BigBlueButtonEPSS 0.4%CVE-2022-36028CRITICALBigBlueButton Greenlight Open Redirect vulnerabilityEPSS 0.4%CVE-2022-41960MEDIUMBigBlueButton contains DoS via failed authToken validationEPSS 0.4%CVE-2025-61602HIGHBigBlueButton vulnerable to Chat DoS via invalid reactionEmojiIdEPSS 0.4%CVE-2024-38518MEDIUMbbb-web API additional parameters consideredEPSS 0.3%CVE-2022-41961MEDIUMBigBlueButton subject to Ineffective user bansEPSS 0.3%CVE-2026-27737MEDIUMBigBlueButton has Stored XSS in bbb-playback replayEPSS 0.3%CVE-2026-41126MEDIUMBigBlueButton has Open Redirect through bigbluebutton/api/join via get-parameter "logoutURL"EPSS 0.2%CVE-2025-55200HIGHBigBlueButton vulnerable to Stored XSS via name of user at Shared NotesEPSS 0.2%CVE-2026-41127MEDIUMBigBlueButton's missing authorization allows viewer to inject/overwrite captionsEPSS 0.2%CVE-2026-27467LOWBigBlueButton: Audio from participants to the server initially unmutedEPSS 0.2%CVE-2026-27736MEDIUMBigBlueButton has Open Redirect vulnerability in ApiControllerEPSS 0.1%