Skip to content
OpenAdvisories

Package · Maven

org.igniterealtime.openfire:parent

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2019-18394 Public exploit Scanner template EPSS 32%

    Ignite Realtime Openfire vulnerable to Server Side Request Forgery

    A Server Side Request Forgery (SSRF) vulnerability in FaviconServlet.java in Ignite Realtime Openfire through 4.4.2 allows attackers to send arbitrary HTTP GET requests.

    org.igniterealtime.openfire:parent Maven
  • Medium —
    CVE-2009-1595 Public exploit

    Ignite Realtime Openfire Allows Users to Change Passwords of Arbitrary Accounts

    The jabber:iq:auth implementation in IQAuthHandler.java in Ignite Realtime Openfire before 3.6.4 allows remote authenticated users to change the passwords of arbitrary accounts via a modified username element in a passwd_change action.

    org.igniterealtime.openfire:parent Maven