CVE-2016-3089

MEDIUM

Apache Openmeetings < 3.1.1 - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in the SWF panel in Apache OpenMeetings before 3.1.2 allows remote attackers to inject arbitrary web script or HTML via the swf parameter.

References (5)

Scores

CVSS v3 6.1
EPSS 0.0087
EPSS Percentile 75.0%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Classification

CWE
CWE-79
Status draft

Affected Products (2)

apache/openmeetings < 3.1.1
org.apache.openmeetings/openmeetings-parent < 3.1.2Maven

Timeline

Published Aug 19, 2016
Tracked Since Feb 18, 2026