bigbluebutton
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 68 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from April 23, 2020 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →BigBlueButton: IDOR on BBB through /api/graphql via POST parameter "presentationId" leads to Authentication Bypass
BigBlueButton: Stored XSS in Screenshare Recording Playback via Unescaped Meeting Name
BigBlueButton: Unauthenticated Session Hijack via Exposed /bigbluebutton/api/handleJoinExistingUser
BigBlueButton: Blind SQL Injection AUTH (Moderator)
BigBlueButton API checksum bypass via presentationUploadExternalUrl
BigBlueButton: Presentation URL Security Hardening
BigBlueButton: Insecure Randomness allows to guess user's conference session token and impersonate them
BigBlueButton has Stored XSS in bbb-playback replay
BigBlueButton's missing authorization allows viewer to inject/overwrite captions
BigBlueButton has Open Redirect through bigbluebutton/api/join via get-parameter "logoutURL"
Monitor bigbluebutton in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.