İçeriğe atla
Noroxi

igniterealtime kayıtları

igniterealtime üreticisine ait 43 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
1 · %2,3
Silahlaştırılmış
2 · %4,7
Pre-auth RCE
2
Düzeltme kaydı olan
%37,2
Yayından KEV’e ortanca
90 gün

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 22
  6. 23
  7. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

43 kayıt
  • CVE-2023-32315
    90Hemen

    Openfire administration console authentication bypass

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %100

    igniterealtime · openfire26 May 2023

  • CVE-2008-6508
    55Planlayın

    Directory traversal vulnerability in the AuthCheck filter in the Admin Console in Openfire 3.6.0a and earlier allows remote attackers to byp

    YüksekCVSS 7,5SilahlaştırılmışEPSS %84

    igniterealtime · openfire23 Mar 2009

  • CVE-2019-18394
    49Planlayın

    A Server Side Request Forgery (SSRF) vulnerability in FaviconServlet.java in Ignite Realtime Openfire through 4.4.2 allows attackers to send

    KritikCVSS 9,8Kavram kanıtıEPSS %32

    igniterealtime · openfire24 Eki 2019

  • CVE-2015-6973
    46Planlayın

    Multiple cross-site request forgery (CSRF) vulnerabilities in Ignite Realtime Openfire 3.10.2 allow remote attackers to hijack the authentic

    OrtaCVSS 6,8Kavram kanıtıEPSS %65

    igniterealtime · openfire16 Eyl 2015

  • CVE-2021-45967
    45Planlayın

    An issue was discovered in Pascom Cloud Phone System before 7.20.x.

    KritikCVSS 9,8Kavram kanıtıEPSS %21

    pascom · cloud phone system18 Mar 2022

  • CVE-2024-25421
    39İzleyin

    An issue in Ignite Realtime Openfire v.4.9.0 and before allows a remote attacker to escalate privileges via the ROOM_CACHE component.

    KritikCVSS 9,8İstismar yokEPSS %2

    igniterealtime · openfire26 Mar 2024

  • CVE-2020-12772
    36İzleyin

    An issue was discovered in Ignite Realtime Spark 2.8.3 (and the ROAR plugin for it) on Windows.

    YüksekCVSS 8,8İstismar yokEPSS %2

    igniterealtime · spark12 May 2020

  • CVE-2014-2741
    32İzleyin

    nio/XMLLightweightParser.java in Ignite Realtime Openfire before 3.9.2 does not properly restrict the processing of compressed XML elements,

    YüksekCVSS 7,8İstismar yokEPSS %4

    igniterealtime · openfire10 Nis 2014

  • CVE-2017-2815
    32İzleyin

    An exploitable XML entity injection vulnerability exists in OpenFire User Import Export Plugin 2.6.0.

    YüksekCVSS 8,1İstismar yokEPSS %1

    igniterealtime · user import export15 May 2018

  • CVE-2008-6509
    31İzleyin

    SQL injection vulnerability in CallLogDAO in SIP Plugin in Openfire 3.6.0a and earlier allows remote attackers to execute arbitrary SQL comm

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    igniterealtime · openfire23 Mar 2009

  • CVE-2014-3451
    31İzleyin

    OpenFire XMPP Server before 3.10 accepts self-signed certificates, which allows remote attackers to perform unspecified spoofing attacks.

    YüksekCVSS 7,5İstismar yokEPSS %2

    igniterealtime · openfire18 Ağu 2017

  • CVE-2015-7707
    28İzleyin

    Ignite Realtime Openfire 3.10.2 allows remote authenticated users to gain administrator access via the isadmin parameter to user-edit-form.j

    OrtaCVSS 6,5Kavram kanıtıEPSS %6

    igniterealtime · openfire5 Eki 2015

  • CVE-2024-25420
    28İzleyin

    An issue in Ignite Realtime Openfire before 4.8.1 allows a remote attacker to escalate privileges via the admin.authorizedJIDs system proper

    YüksekCVSS 7,2İstismar yokEPSS %1

    igniterealtime · openfire26 Mar 2024

  • CVE-2014-5075
    27İzleyin

    The Ignite Realtime Smack XMPP API 4.x before 4.0.2, and 3.x and 2.x when a custom SSLContext is used, does not verify that the server hostn

    OrtaCVSS 6,8İstismar yokEPSS %1

    redhat · jboss fuse25 Eki 2014

  • CVE-2009-1596
    26İzleyin

    Ignite Realtime Openfire before 3.6.5 does not properly implement the register.password (aka canChangePassword) console configuration settin

    OrtaCVSS 6,5İstismar yokEPSS %1

    igniterealtime · openfire11 May 2009

  • CVE-2019-18393
    25İzleyin

    PluginServlet.java in Ignite Realtime Openfire through 4.4.2 does not ensure that retrieved files are located under the Openfire home direct

    OrtaCVSS 5,3Kavram kanıtıEPSS %14

    igniterealtime · openfire24 Eki 2019

  • CVE-2018-11688
    25İzleyin

    Ignite Realtime Openfire before 3.9.2 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input.

    OrtaCVSS 6,1İstismar yokEPSS %2

    igniterealtime · openfire13 Haz 2018

  • CVE-2008-6511
    24İzleyin

    Open redirect vulnerability in login.jsp in Openfire 3.6.0a and earlier allows remote attackers to redirect users to arbitrary web sites and

    OrtaCVSS 5,8Kavram kanıtıEPSS %2

    igniterealtime · openfire23 Mar 2009

  • CVE-2019-20363
    24İzleyin

    An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via alias to Manage Store Contents.

    OrtaCVSS 6,1İstismar yokEPSS %1

    igniterealtime · openfire8 Oca 2020

  • CVE-2019-20366
    24İzleyin

    An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via isTrustStore to Manage Store Contents.

    OrtaCVSS 6,1İstismar yokEPSS %1

    igniterealtime · openfire8 Oca 2020

  • CVE-2019-20365
    24İzleyin

    An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via search to the Users/Group search page.

    OrtaCVSS 6,1İstismar yokEPSS %1

    igniterealtime · openfire8 Oca 2020

  • CVE-2019-20364
    24İzleyin

    An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via cacheName to SystemCacheDetails.jsp.

    OrtaCVSS 6,1İstismar yokEPSS %1

    igniterealtime · openfire8 Oca 2020

  • CVE-2020-24604
    24İzleyin

    A Reflected XSS vulnerability was discovered in Ignite Realtime Openfire version 4.5.1.

    OrtaCVSS 6,1İstismar yokEPSS %1

    igniterealtime · openfire2 Eyl 2020

  • CVE-2020-24602
    24İzleyin

    Ignite Realtime Openfire 4.5.1 has a reflected Cross-site scripting vulnerability which allows an attacker to execute arbitrary malicious UR

    OrtaCVSS 6,1İstismar yokEPSS %1

    igniterealtime · openfire2 Eyl 2020

  • CVE-2020-35200
    24İzleyin

    Ignite Realtime Openfire 4.6.0 has plugins/clientcontrol/spark-form.jsp Reflective XSS.

    OrtaCVSS 6,1İstismar yokEPSS %1

    igniterealtime · openfire12 Ara 2020