Trueconf
11 CVEs across 4 Trueconf products. Browse Trueconf vulnerabilities, severities, and proof-of-concept exploits.
Trueconf products with known CVEs
Trueconf CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-3502 | High | 7.8 | 2026-03-30 | TrueConf Client downloads application update code and applies it without performing verification. An attacker who is able to influence the update delivery path… |
CVE-2025-66823 | Medium | 5.4 | 2025-12-30 | An HTML Injection vulnerability in TrueConf server 5.5.2.10813 in the conference description field allows an attacker to inject arbitrary HTML in the Create/Ed… |
CVE-2025-66835 | High | 7.1 | 2025-12-30 | TrueConf Client 8.5.2 is vulnerable to DLL hijacking via crafted wfapi.dll allowing local attackers to execute arbitrary code within the user's context. |
CVE-2025-66834 | High | 7.3 | 2025-12-30 | A CSV Formula Injection vulnerability in TrueConf Server v5.5.2.10813 allows a normal user to inject malicious spreadsheet formulas into exported chat logs via… |
CVE-2025-66824 | High | 8.7 | 2025-12-30 | A Stored Cross-Site Scripting (XSS) vulnerability exists in the Meeting location field of the Create/Edit Conference functionality in TrueConf Server v5.5.2.10… |
CVE-2022-46764 | Critical | 9.8 | 2022-12-27 | A SQL injection issue in the web API in TrueConf Server 5.2.0.10225 (fixed in 5.2.6.10025) allows remote unauthenticated attackers to execute arbitrary SQL com… |
CVE-2022-46763 | High | 8.8 | 2022-12-27 | A SQL injection issue in a database stored function in TrueConf Server 5.2.0.10225 (fixed in 5.2.6.10025) allows a low-privileged database user to execute arbi… |
CVE-2017-20120 | Medium | 4.3 | 2022-06-29 | A vulnerability classified as problematic was found in TrueConf Server 4.3.7. This vulnerability affects unknown code of the file /admin/service/stop/. The man… |
CVE-2017-20119 | Low | 3.5 | 2022-06-29 | A vulnerability classified as problematic has been found in TrueConf Server 4.3.7. This affects an unknown part of the file /admin/general/change-lang. The man… |
CVE-2017-20118 | Low | 3.5 | 2022-06-29 | A vulnerability was found in TrueConf Server 4.3.7. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/c… |
CVE-2017-20117 | Low | 3.5 | 2022-06-29 | A vulnerability was found in TrueConf Server 4.3.7. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file… |
CVE-2017-20116 | Low | 3.5 | 2022-06-29 | A vulnerability was found in TrueConf Server 4.3.7. It has been classified as problematic. Affected is an unknown function of the file /admin/group/list/. The… |
CVE-2017-20115 | Low | 3.5 | 2022-06-29 | A vulnerability was found in TrueConf Server 4.3.7 and classified as problematic. This issue affects some unknown processing of the file /admin/conferences/lis… |
CVE-2017-20114 | Low | 3.5 | 2022-06-29 | A vulnerability has been found in TrueConf Server 4.3.7 and classified as problematic. This vulnerability affects unknown code of the file /admin/conferences/g… |
CVE-2017-20113 | Low | 3.5 | 2022-06-29 | A vulnerability, which was classified as problematic, was found in TrueConf Server 4.3.7. This affects an unknown part. The manipulation leads to basic cross s… |