CVE-2020-35200

2020-12-1218:15:11

Google

osv.dev

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.9%

JSON

Ignite Realtime Openfire 4.6.0 has plugins/clientcontrol/spark-form.jsp Reflective XSS.

CPENameOperatorVersion
openfireeq3.9.2
openfireeq4.0.0.beta
openfireeqattic/pubsub_clustering
openfireeq3.10.0
openfireeq4.4.0
openfireeq4.6.0beta
openfireeq4.6.0
openfireeq3.9.3
openfireeq4.2.0beta
openfireeq4.2.0

Name	Operator	Version
openfire	eq	3.9.2
openfire	eq	4.0.0.beta
openfire	eq	attic/pubsub_clustering
openfire	eq	3.10.0
openfire	eq	4.4.0
openfire	eq	4.6.0beta
openfire	eq	4.6.0
openfire	eq	3.9.3
openfire	eq	4.2.0beta
openfire	eq	4.2.0