Read the docs

TrueConf

Records17All Threatist records
Exploited (KEV)3In CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9

Exploited now

TrueConf records in CISA KEV
TI-2026-50789 TrueConf Server Missing Authentication for Critical Function Vulnerability Priority CRITICAL 99KEV 2026-08-20TI-2026-50790 TrueConf Server Code Injection Vulnerability Priority CRITICAL 100KEV 2026-08-20TI-2026-03017 TrueConf Client Download of Code Without Integrity Check Vulnerability Priority CRITICAL 93KEV 2026-04-02

Components

Products in the NVD configurations · select one to filter the records
Server 9 records MEDIUM Trueconf Server 6 records CRITICAL Trueconf 2 records CRITICAL

Records

9 records in Server · all components

TI-2017-14185 CVE-2017-20119 · GHSA-fx47-prh9-mj6x

TrueConf Server change-lang redirect

Priority MEDIUM 60

A vulnerability classified as problematic has been found in TrueConf Server 4.3.7.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00726 Published 2022-06-29 No fix listed CWE-601
TI-2017-14184 CVE-2017-20118 · GHSA-3m77-wvgm-wjf3

TrueConf Server DOM cross site scripting

Priority MEDIUM 58

A vulnerability was found in TrueConf Server 4.3.7.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00622 Published 2022-06-29 No fix listed CWE-80
TI-2017-14183 CVE-2017-20117 · GHSA-7x9g-vgx6-j7ch

TrueConf Server group DOM cross site scripting

Priority MEDIUM 58

A vulnerability was found in TrueConf Server 4.3.7.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00622 Published 2022-06-29 No fix listed CWE-80
TI-2017-14182 CVE-2017-20116 · GHSA-pp22-gvh9-5p2m

TrueConf Server Reflected cross site scripting

Priority MEDIUM 58

A vulnerability was found in TrueConf Server 4.3.7.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00622 Published 2022-06-29 No fix listed CWE-80
TI-2017-14181 CVE-2017-20115 · GHSA-8pcc-94cg-8pr4

TrueConf Server Reflected cross site scripting

Priority MEDIUM 58

A vulnerability was found in TrueConf Server 4.3.7 and classified as problematic.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00622 Published 2022-06-29 No fix listed CWE-80
TI-2017-14180 CVE-2017-20114 · GHSA-6p68-6r83-gc73

TrueConf Server Reflected cross site scripting

Priority MEDIUM 58

A vulnerability has been found in TrueConf Server 4.3.7 and classified as problematic.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00622 Published 2022-06-29 No fix listed CWE-80
TI-2017-14179 CVE-2017-20113 · GHSA-5hj6-g43j-3gj5

TrueConf Server Stored cross site scripting

Priority MEDIUM 58

A vulnerability, which was classified as problematic, was found in TrueConf Server 4.3.7.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00622 Published 2022-06-29 No fix listed CWE-80
TI-2022-23125 CVE-2022-46764 · GHSA-m533-gv9w-rfq5

SQL injection in TrueConf Server

Priority MEDIUM 53

A SQL injection issue in the web API in TrueConf Server 5.2.0.10225 (fixed in 5.2.6.10025) allows remote unauthenticated attackers to execute arbitrary SQL commands, ultimately leading to remote code execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0232 Published 2022-12-27 Fixed in 5.2.6.10025 CWE-89
TI-2022-23124 CVE-2022-46763 · GHSA-p2j5-ch58-jpmw

SQL injection in TrueConf Server

Priority MEDIUM 42

A SQL injection issue in a database stored function in TrueConf Server 5.2.0.10225 (fixed in 5.2.6.10025) allows a low-privileged database user to execute arbitrary SQL commands as the database administrator, resulting i…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01156 Published 2022-12-27 Fixed in 5.2.6.10025 CWE-89
Open these records in search →