Read the docs

igniterealtime

Records45All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9

Exploited now

igniterealtime records in CISA KEV
TI-2023-15609 Ignite Realtime Openfire Path Traversal Vulnerability Priority CRITICAL 96KEV 2023-08-24

Components

Products in the NVD configurations · select one to filter the records
Openfire 37 records CRITICAL Smack 3 records LOW Smack Api 1 record LOW Spark 1 record MEDIUM User Import Export 1 record LOW

Records

1 record in Smack Api · all components

TI-2014-04152 CVE-2014-5075 · GHSA-pxxv-xr7h-7624

The Ignite Realtime Smack XMPP API 4.x before 4.0.2, and 3.x and 2.x when a custom…

Priority LOW 32

The Ignite Realtime Smack XMPP API 4.x before 4.0.2, and 3.x and 2.x when a custom SSLContext is used, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName fi…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00924 Published 2014-10-25 Partial fix CWE-310
Open these records in search →