Test ID:	1.3.6.1.4.1.25623.1.0.808658
Category:	Web application abuses
Title:	Apache OpenMeetings < 3.1.2 Multiple Vulnerabilities - Active Check
Summary:	Apache OpenMeetings is prone to multiple vulnerabilities.
Description:	Summary: Apache OpenMeetings is prone to multiple vulnerabilities. Vulnerability Insight: The following vulnerabilities exist: - CVE-2016-3089: Improper sanitization of input to 'swf'query parameter in swf panel - CVE-2016-8736: Remote code execution (RCE) via RMI deserialization attack Vulnerability Impact: Successful exploitation will allow remote attackers to execute: - arbitrary script code in a user's browser session within the trust relationship between their browser and the server - remote commands via RMI attacks against the server Affected Software/OS: Apache OpenMeetings prior to version 3.1.2. Solution: Update to version 3.1.2 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-3089 BugTraq ID: 92442 http://www.securityfocus.com/bid/92442 Bugtraq: 20160812 [CVE-2016-3089] Apache OpenMeetings XSS in SWF panel (Google Search) http://www.securityfocus.com/archive/1/539192/100/0/threaded http://packetstormsecurity.com/files/138313/Apache-OpenMeetings-3.1.0-Cross-Site-Scripting.html Common Vulnerability Exposure (CVE) ID: CVE-2016-8736 BugTraq ID: 94145 http://www.securityfocus.com/bid/94145 http://openmeetings.markmail.org/thread/tr47byaaopnemvne
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.