Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cvelistCertccCVELIST:CVE-2014-0364
HistoryApr 30, 2014 - 10:00 a.m.

CVE-2014-0364

2014-04-3010:00:00
certcc
www.cve.org

6.2 Medium

AI Score

Confidence

Low

0.009 Low

EPSS

Percentile

82.4%

JSON

The ParseRoster component in the Ignite Realtime Smack XMPP API before 4.0.0-rc1 does not verify the from attribute of a roster-query IQ stanza, which allows remote attackers to spoof IQ responses via a crafted attribute.

Related

nessus 1
cve 1
nvd 1
prion 1
openvas 1
fedora 1
cert 1
ibm 1
redhat 3
nessus
nessus
Fedora 21 : smack-4.0.6-1.fc21 (2015-0046)
2015-01-12 00:00:00
cve
cve
CVE-2014-0364
2014-04-30 10:49:04
nvd
nvd
CVE-2014-0364
2014-04-30 10:49:04
prion
prion
Design/Logic Flaw
2014-04-30 10:49:00
openvas
openvas
Fedora Update for smack FEDORA-2015-0046
2015-01-12 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: smack-4.0.6-1.fc21
2015-01-11 10:57:16
cert
cert
Ignite Realtime Smack XMPP API contains multiple vulnerabilities
2014-04-29 00:00:00
ibm
ibm
Security Bulletin: Multiple vulnerabilities have been identified in Smack API shipped with IBM Tivoli Netcool Impact (CVE-2014-0363, CVE-2014-0364)
2022-12-13 01:10:48
redhat
redhat
(RHSA-2014:0819) Important: Red Hat JBoss BPM Suite 6.0.2 update
2014-06-30 20:43:02
(RHSA-2014:0818) Important: Red Hat JBoss BRMS 6.0.2 update
2014-06-30 20:42:20
(RHSA-2015:1176) Important: Red Hat JBoss Fuse 6.2.0 update
2015-06-23 16:46:09

6.2 Medium

AI Score

Confidence

Low

0.009 Low

EPSS

Percentile

82.4%

JSON
Related for CVELIST:CVE-2014-0364
nessus1cve1nvd1prion1openvas1fedora1cert1ibm1redhat3