Openfire@* Security Vulnerabilities and Issues — Openfire@* CVE List

Lucene search

Ignite RealtimeOpenfire*

3 matches found

CVE•added 2024/03/26 9:15 p.m.•65 views

CVE-2024-25421

An issue in Ignite Realtime Openfire v.4.9.0 and before allows a remote attacker to escalate privileges via the ROOM_CACHE component.

9.8CVSS7AI score0.00925EPSS

CVE•added 2007/06/01 1:30 a.m.•34 views

CVE-2007-2975

The admin console in Ignite Realtime Openfire 3.3.0 and earlier (formerly Wildfire) does not properly specify a filter mapping in web.xml, which allows remote attackers to gain privileges and execute arbitrary code by accessing functionality that is exposed through DWR, as demonstrated using the do...

7.5CVSS7.8AI score0.01854EPSS

CVE•added 2008/08/14 10:0 p.m.•29 views

CVE-2006-7233

Cross-site scripting (XSS) vulnerability in the login form (login.jsp) of the admin console in Openfire (formerly Wildfire) 2.6.0, and possibly other versions before 3.5.3, allows remote attackers to inject arbitrary web script or HTML via the url parameter.

4.3CVSS6.1AI score0.00475EPSS