Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ignite realtime vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2007-2975
The admin console in Ignite Realtime Openfire 3.3.0 and previous versions (formerly Wildfire) does not properly specify a filter mapping in web.xml, which allows remote malicious users to gain privileges and execute arbitrary code by accessing functionality that is exposed throug...
Ignite Realtime Openfire 3.2.1Ignite Realtime Openfire 3.1.1Ignite Realtime Openfire 3.0.1Ignite Realtime OpenfireIgnite Realtime Openfire 3.2.4Ignite Realtime Openfire 3.2.3Ignite Realtime Openfire 3.2.2Ignite Realtime Openfire 3.0.0Ignite Realtime Openfire 2.6.2Ignite Realtime Openfire 2.6.1Ignite Realtime Openfire 2.6.0Ignite Realtime Openfire 3.2.0Ignite Realtime Openfire 3.1.0
4.3
CVSSv2
CVE-2006-7233
Cross-site scripting (XSS) vulnerability in the login form (login.jsp) of the admin console in Openfire (formerly Wildfire) 2.6.0, and possibly other versions prior to 3.5.3, allows remote malicious users to inject arbitrary web script or HTML via the url parameter.
Ignite Realtime Openfire 2.6.0Ignite Realtime Openfire
4.3
CVSSv2
CVE-2009-0496
Multiple cross-site scripting (XSS) vulnerabilities in Ignite Realtime Openfire 3.6.2 allow remote malicious users to inject arbitrary web script or HTML via the (1) log parameter to (a) logviewer.jsp and (b) log.jsp; (2) search parameter to (c) group-summary.jsp; (3) username pa...
Ignite Realtime Openfire 3.6.2
4
CVSSv2
CVE-2008-1728
ConnectionManagerImpl.java in Ignite Realtime Openfire 3.4.5 allows remote authenticated users to cause a denial of service (daemon outage) by triggering large outgoing queues without reading messages.
Ignite Realtime Openfire 3.4.5
4.3
CVSSv2
CVE-2005-4876
Cross-site scripting (XSS) vulnerability in the login form (login.jsp) of the admin console in Openfire (formerly Wildfire) 2.2.2, and possibly other versions prior to 2.3.0 Beta 2, allows remote malicious users to inject arbitrary web script or HTML via the username parameter, a...
Ignite Realtime Openfire 2.2.2
4.3
CVSSv2
CVE-2005-4877
Cross-site scripting (XSS) vulnerability in the login form (login.jsp) of the admin console in Openfire (formerly Wildfire) 2.3.0 Beta 2 allows remote malicious users to inject arbitrary web script or HTML via Javascript events in the username parameter, a different vulnerability...
Ignite Realtime Openfire 2.3.0
4.3
CVSSv2
CVE-2018-11688
Ignite Realtime Openfire prior to 3.9.2 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability via a crafted URL to execute script in a victim's Web browser within the security context o...
Igniterealtime Openfire 3.7.1
6.5
CVSSv2
CVE-2015-7707
Ignite Realtime Openfire 3.10.2 allows remote authenticated users to gain administrator access via the isadmin parameter to user-edit-form.jsp.
Igniterealtime Openfire 3.10.2
3.5
CVSSv2
CVE-2020-35201
Ignite Realtime Openfire 4.6.0 has create-bookmark.jsp users Stored XSS.
Igniterealtime Openfire 4.6.0
3.5
CVSSv2
CVE-2020-35199
Ignite Realtime Openfire 4.6.0 has create-bookmark.jsp groupchatJID Stored XSS.
Igniterealtime Openfire 4.6.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4040privilege escalationCVE-2024-4112CVE-2024-32872man-in-the-middleCVE-2024-32788bypassCVE-2024-3400CVE-2024-28976
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook