Lucene search
Veracode Vulnerability DatabaseVERACODE:21371HistoryAug 26, 2019 - 6:31 a.m.
Cross-site Scripting (XSS)
2019-08-2606:31:09
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
EPSS
0.001
Percentile
29.3%
Openfire Core XMPP Server is vulnerable to cross-site scripting (XSS). The attack is possible because it does not sanitize the parameters in LDAP setup test, allowing an attacker to inject arbitrary script through it.
Related
osv
osv
CVE-2019-15488
2019-08-23 13:15:11
Cross-site Scripting in Ignite Realtime Openfire
2019-08-27 17:37:33
cvelist
cvelist
CVE-2019-15488
2019-08-23 12:37:31
prion
prion
Cross site scripting
2019-08-23 13:15:00
nvd
nvd
CVE-2019-15488
2019-08-23 13:15:11
github
github
Cross-site Scripting in Ignite Realtime Openfire
2019-08-27 17:37:33
cve
cve
CVE-2019-15488
2019-08-23 13:15:11