The Vigil@nce team watches public vulnerabilities impacting your computers, and then offers security solutions, a vigilance database and tools to fix them.

Computer vulnerabilities of Ignite Realtime Openfire

HTTP/2: multiple vulnerabilities
An attacker can use several vulnerabilities of HTTP/2...
1072144, 1072860, 1167160, 6198380, 6369095, bulletinoct2019, CERTFR-2019-AVI-389, cpuapr2020, cpujan2021, cpuoct2020, CVE-2019-9511, CVE-2019-9512, CVE-2019-9513, CVE-2019-9514, CVE-2019-9515, CVE-2019-9516, CVE-2019-9517, CVE-2019-9518, DLA-2485-1, DSA-4503-1, DSA-4505-1, DSA-4508-1, DSA-4511-1, DSA-4520-1, DSA-4669-1, FEDORA-2019-1686ae9b59, FEDORA-2019-5a6a7bc12c, FEDORA-2019-63ba15cc83, FEDORA-2019-7443ebda4b, FEDORA-2019-81985a8858, FEDORA-2019-8a437d5c2f, FEDORA-2019-befd924cfe, FEDORA-2021-d5b2c18fe6, HT210436, NFLX-2019-002, openSUSE-SU-2019:2000-1, openSUSE-SU-2019:2051-1, openSUSE-SU-2019:2056-1, openSUSE-SU-2019:2072-1, openSUSE-SU-2019:2085-1, openSUSE-SU-2019:2114-1, openSUSE-SU-2019:2115-1, openSUSE-SU-2019:2120-1, openSUSE-SU-2019:2130-1, openSUSE-SU-2019:2232-1, openSUSE-SU-2019:2234-1, openSUSE-SU-2019:2264-1, RHSA-2019:2692-01, RHSA-2019:2726-01, RHSA-2019:2745-01, RHSA-2019:2746-01, RHSA-2019:2775-01, RHSA-2019:2799-01, RHSA-2019:2893-01, RHSA-2019:2925-01, RHSA-2019:2939-01, RHSA-2019:2949-01, RHSA-2019:2955-01, RHSA-2019:4018-01, RHSA-2019:4019-01, RHSA-2019:4020-01, RHSA-2019:4021-01, RHSA-2019:4040-01, RHSA-2019:4041-01, RHSA-2019:4042-01, RHSA-2019:4045-01, RHSA-2019:4269-01, RHSA-2019:4273-01, RHSA-2020:0406-01, SSA:2020-091-02, SUSE-SU-2019:2213-1, SUSE-SU-2019:2214-1, SUSE-SU-2019:2237-1, SUSE-SU-2019:2254-1, SUSE-SU-2019:2259-1, SUSE-SU-2019:2260-1, SUSE-SU-2019:2309-1, SUSE-SU-2019:2329-1, SUSE-SU-2019:2473-1, SUSE-SU-2019:2559-1, SUSE-SU-2020:0059-1, Synology-SA-19:33, Synology-SA-19:37, USN-4099-1, USN-4113-1, USN-4113-2, USN-4308-1, VIGILANCE-VUL-30040, VU#605641
Ignite Openfire: Cross Site Scripting via setup test page
An attacker can trigger a Cross Site Scripting via setup test page of Ignite Openfire, in order to run JavaScript code in the context of the web site...
CVE-2019-15488, VIGILANCE-VUL-30030
Openfire: Cross Site Scripting via LDAP Setup Pages
An attacker can trigger a Cross Site Scripting via LDAP Setup Pages of Openfire, in order to run JavaScript code in the context of the web site...
VIGILANCE-VUL-28281
Openfire: Cross Site Scripting
An attacker can trigger a Cross Site Scripting of Openfire, in order to run JavaScript code in the context of the web site...
CVE-2018-11688, VIGILANCE-VUL-26320
Openfire: Cross Site Scripting via Property Name
An attacker can trigger a Cross Site Scripting via Property Name of Openfire, in order to run JavaScript code in the context of the web site...
VIGILANCE-VUL-25653
Openfire: Cross Site Scripting via setup-host-settings.jsp
An attacker can trigger a Cross Site Scripting via setup-host-settings.jsp of Openfire, in order to run JavaScript code in the context of the web site...
CVE-2017-15911, OF-1250, OF-1400, OF-1417, VIGILANCE-VUL-24489
Openfire: SQL injection via the DBAccess plugin
An attacker can use a SQL injection via DBAccess of Openfire, in order to read or alter data...
VIGILANCE-VUL-22651
Openfire: denial of service via SASL
When authentication is delegated, an attacker can start an authentication attempt via SASL from Openfire, in order to trigger a denial of service...
VIGILANCE-VUL-21897
Openfire: multiple vulnerabilities
An attacker can use several vulnerabilities of Openfire...
CVE-2015-7707, VIGILANCE-VUL-21456
Openfire: Cross Site Scripting via setup-admin-settings_test.jsp
An attacker can trigger a Cross Site Scripting via setup-admin-settings_test.jsp of Openfire, in order to run JavaScript code in the context of the web site...
VIGILANCE-VUL-20676
Our database contains other pages. You can request a free trial to read them.

Display information about Ignite Realtime Openfire: