Lucene search
K

CVE-2019-18394

๐Ÿ—“๏ธย 09 Jan 2026ย 10:19:02Reported byย redhat.comTypeย 
redhatcve
ย redhatcve
๐Ÿ”—ย access.redhat.com๐Ÿ‘ย 4ย Views

Server Side Request Forgery vulnerability in Ignite Realtime Openfire allows arbitrary HTTP GET requests.

Related
Refs
ReporterTitlePublishedViews
Family
ATTACKERKB
CVE-2019-18394
24 Oct 201900:00
โ€“attackerkb
BDU FSTEC
Vulnerability of the FaviconServlet.java function in the Openfire XMPP server, allowing attackers to send arbitrary HTTP GET requests
12 Aug 202000:00
โ€“bdu_fstec
Circl
CVE-2019-18394
5 Aug 202014:30
โ€“circl
CNVD
Ignite Realtime Openfire Server-Side Request Forgery Vulnerability
25 Oct 201900:00
โ€“cnvd
CVE
CVE-2019-18394
24 Oct 201910:58
โ€“cve
Cvelist
CVE-2019-18394
24 Oct 201910:58
โ€“cvelist
Gitee
Exploit for Path Traversal in Igniterealtime Openfire
24 Jul 202017:46
โ€“gitee
Github Security Blog
Ignite Realtime Openfire vulnerable to Server Side Request Forgery
24 May 202216:59
โ€“github
Nuclei
Ignite Realtime Openfire <=4.4.2 - Server-Side Request Forgery
22 Jun 202605:20
โ€“nuclei
NVD
CVE-2019-18394
24 Oct 201911:15
โ€“nvd
Rows per page

Data

Build on a solid foundation withย Vulners data

Weย provide theย essential building blocks forย cybersecurity solutions withย comprehensive, structured, andย constantly updated vulnerability andย exploits data

Api

Power your application withย Vulners API

The Vulners REST API offers reliable, high-performance access toย vulnerabilityย intelligence, withย 99.9%ย SLAย uptime andย CDN-backed data delivery forย seamlessย global access

App

Assess and manage vulnerabilities withย Vulnersย tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

09 Jan 2026 10:19Current
7High risk
Vulners AI Score7
CVSS 27.5
CVSS 3.19.8
EPSS0.32304
4