CVE-2017-7680

published 2017-07-17

CVE-2017-7680: Apache OpenMeetings 1.0.0 has an overly permissive crossdomain.xml file. This allows for flash content to be loaded from untrusted domains.

Priority P3 37 high 7.5 CVSS 3.0

AV N AC L PR N UI N S U C N I H A N

Apache OpenMeetings 1.0.0 has an overly permissive crossdomain.xml file. This allows for flash content to be loaded from untrusted domains.

Affected

22 ranges

Vendor	Product	Version range	Fixed in
apache	openmeetings	—	—
apache	openmeetings	—	—
apache	openmeetings	—	—
apache	openmeetings	—	—
apache	openmeetings	—	—
apache	openmeetings	—	—
apache	openmeetings	—	—
apache	openmeetings	—	—
apache	openmeetings	—	—
apache	openmeetings	—	—
apache	openmeetings	—	—
apache	openmeetings	—	—
apache	openmeetings	—	—
apache	openmeetings	—	—
apache	openmeetings	—	—
apache	openmeetings	—	—
apache	openmeetings	—	—
apache	openmeetings	—	—
apache	openmeetings	—	—
apache	openmeetings	—	—
apache	openmeetings	—	—
apache_software_foundation	apache_openmeetings	—	—

CVSS provenance

nvd v3.0 7.5 HIGH CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

nvd v2.0 5.0 MEDIUM AV:N/AC:L/Au:N/C:N/I:P/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.