Slixmpp Project

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Slixmpp Project records in CISA KEV

No Slixmpp Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Slixmpp 3 records LOW

Records

3 records in Slixmpp · all components

TI-2022-22262 CVE-2022-45197 · GHSA-q6cq-m9gm-6q2f

Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an…

LOW 39

Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an attacker to pose as any server in the eyes of Slixmpp.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00514 Published 2022-12-25 Fixed in 1.8.3 CWE-295

TI-2019-15838 CVE-2019-1000021 · GHSA-4g62-mfwx-4q48

slixmpp version before commit 7cd73b594e8122dddf847953fcfc85ab4d316416 contains an…

LOW 37

slixmpp version before commit 7cd73b594e8122dddf847953fcfc85ab4d316416 contains an incorrect Access Control vulnerability in XEP-0223 plugin (Persistent Storage of Private Data via PubSub) options profile, used for the c…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02323 Published 2019-02-04 Fixed in 1.4.2 CWE-284

TI-2017-03593 CVE-2017-5591 · GHSA-c35g-jr5f-h83p

An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients…

LOW 30

An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01714 Published 2017-02-09 Fixed in 1.2.4, 1.3.2 CWE-20

Open these records in search →

Critical	0
High	2
Medium	1
Low	0
No CVSS	0