Vulnerabilities > Igniterealtime

DATE CVE VULNERABILITY TITLE RISK
2020-05-12 CVE-2020-12772 Information Exposure vulnerability in Igniterealtime Spark 2.8.3
An issue was discovered in Ignite Realtime Spark 2.8.3 (and the ROAR plugin for it) on Windows.
network
low complexity
igniterealtime CWE-200
8.8
8.8
2020-03-19 CVE-2019-20526 Cross-site Scripting vulnerability in Igniterealtime Openfire 4.4.1
Ignite Realtime Openfire 4.4.1 allows XSS via the setup/setup-datasource-standard.jsp password parameter.
network
low complexity
igniterealtime CWE-79
6.1
6.1
2020-03-19 CVE-2019-20525 Cross-site Scripting vulnerability in Igniterealtime Openfire 4.4.1
Ignite Realtime Openfire 4.4.1 allows XSS via the setup/setup-datasource-standard.jsp driver parameter.
network
low complexity
igniterealtime CWE-79
6.1
6.1
2020-03-19 CVE-2019-20527 Cross-site Scripting vulnerability in Igniterealtime Openfire 4.4.1
Ignite Realtime Openfire 4.4.1 allows XSS via the setup/setup-datasource-standard.jsp serverURL parameter.
network
low complexity
igniterealtime CWE-79
6.1
6.1
2020-03-18 CVE-2019-20528 Cross-site Scripting vulnerability in Igniterealtime Openfire 4.4.1
Ignite Realtime Openfire 4.4.1 allows XSS via the setup/setup-datasource-standard.jsp username parameter.
network
low complexity
igniterealtime CWE-79
6.1
6.1
2020-01-08 CVE-2019-20366 Cross-site Scripting vulnerability in Igniterealtime Openfire 4.4.4
An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via isTrustStore to Manage Store Contents.
network
low complexity
igniterealtime CWE-79
6.1
6.1
2020-01-08 CVE-2019-20365 Cross-site Scripting vulnerability in Igniterealtime Openfire 4.4.4
An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via search to the Users/Group search page.
network
low complexity
igniterealtime CWE-79
6.1
6.1
2020-01-08 CVE-2019-20364 Cross-site Scripting vulnerability in Igniterealtime Openfire 4.4.4
An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via cacheName to SystemCacheDetails.jsp.
network
low complexity
igniterealtime CWE-79
6.1
6.1
2020-01-08 CVE-2019-20363 Cross-site Scripting vulnerability in Igniterealtime Openfire 4.4.4
An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via alias to Manage Store Contents.
network
low complexity
igniterealtime CWE-79
6.1
6.1
2019-10-24 CVE-2019-18394 Server-Side Request Forgery (SSRF) vulnerability in Igniterealtime Openfire
A Server Side Request Forgery (SSRF) vulnerability in FaviconServlet.java in Ignite Realtime Openfire through 4.4.2 allows attackers to send arbitrary HTTP GET requests.
network
low complexity
igniterealtime CWE-918
critical
 9.8
9.8