org.igniterealtime.openfire:xmppserver

3 results · Clear filters · Feed

• Medium 5.9
  CVE-2025-59154

  Openfire allows potential identity spoofing via unsafe CN parsing

  Openfire is an XMPP server licensed under the Open Source Apache License. Openfire’s SASL EXTERNAL mechanism for client TLS authentication contains a vulnerability in how it extracts user identities from X.509 certificates. Instead of parsing the structured A…

  igniterealtime Openfire org.igniterealtime.openfire:xmppserver Maven
  Sep 15, 2025
• Medium 6.1
  CVE-2019-20528

  Ignite Realtime Openfire allows Cross-site Scripting

  Ignite Realtime Openfire 4.4.1 allows XSS via the setup/setup-datasource-standard.jsp username parameter.

  org.igniterealtime.openfire:xmppserver Maven
  Mar 18, 2020
• Medium 6.1
  CVE-2019-15488

  Cross-site Scripting in Ignite Realtime Openfire

  Ignite Realtime Openfire before 4.4.1 has reflected XSS via an LDAP setup test.

  org.igniterealtime.openfire:xmppserver Maven
  Aug 23, 2019