CVE-2016-8736

CRITICAL

Apache OpenMeetings < 3.1.2 - Remote Code Execution via RMI Deserialization

Title source: llm
STIX 2.1

Description

Apache OpenMeetings before 3.1.2 is vulnerable to Remote Code Execution via RMI deserialization attack.

References (2)

Core 2
Core References
Mailing List, Third Party Advisory x_refsource_misc
http://openmeetings.markmail.org/thread/tr47byaaopnemvne
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/94145

Scores

CVSS v3 9.8
EPSS 0.0615
EPSS Percentile 90.9%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-502
Status published
Products (3)
apache/openmeetings < 3.1.2
Apache Software Foundation/Apache OpenMeetings before 3.1.12
org.apache.openmeetings/openmeetings-parent 0 - 3.1.2Maven
Published Oct 12, 2017
Tracked Since Feb 18, 2026