User Import Export Security Vulnerabilities and Issues — User Import Export CVE List

IgniterealtimeUser Import Export

1 matches found

CVE•added 2018/05/15 5:0 p.m.•62 views

CVE-2017-2815

OpenFire User Import Export Plugin 2.6.0 is vulnerable to XML External Entity (XXE) injection (CVE-2017-2815). An authenticated attacker can send a crafted request to trigger XXE, enabling retrieval of arbitrary files or causing a Denial of Service. Affected component: OpenFire User Import Export...

8.1CVSS7.9AI score0.00933EPSS