CVE-2020-35202

2020-12-1218:15:11

Google

osv.dev

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.7%

JSON

Ignite Realtime Openfire 4.6.0 has plugins/dbaccess/db-access.jsp sql Stored XSS.

CPENameOperatorVersion
openfireeq3.9.2
openfireeq4.0.0.beta
openfireeqattic/pubsub_clustering
openfireeq3.10.0
openfireeq4.4.0
openfireeq4.6.0beta
openfireeq4.6.0
openfireeq3.9.3
openfireeq4.2.0beta
openfireeq4.2.0

Name	Operator	Version
openfire	eq	3.9.2
openfire	eq	4.0.0.beta
openfire	eq	attic/pubsub_clustering
openfire	eq	3.10.0
openfire	eq	4.4.0
openfire	eq	4.6.0beta
openfire	eq	4.6.0
openfire	eq	3.9.3
openfire	eq	4.2.0beta
openfire	eq	4.2.0