Vulnerabilities > Igniterealtime
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2020-05-12 | CVE-2020-12772 | Missing Encryption of Sensitive Data vulnerability in Igniterealtime Spark 2.8.3 An issue was discovered in Ignite Realtime Spark 2.8.3 (and the ROAR plugin for it) on Windows. | 6.8 |
| 2020-03-19 | CVE-2019-20526 | Cross-site Scripting vulnerability in Igniterealtime Openfire 4.4.1 Ignite Realtime Openfire 4.4.1 allows XSS via the setup/setup-datasource-standard.jsp password parameter. | 4.3 |
| 2020-03-19 | CVE-2019-20525 | Cross-site Scripting vulnerability in Igniterealtime Openfire 4.4.1 Ignite Realtime Openfire 4.4.1 allows XSS via the setup/setup-datasource-standard.jsp driver parameter. | 4.3 |
| 2020-03-19 | CVE-2019-20527 | Cross-site Scripting vulnerability in Igniterealtime Openfire 4.4.1 Ignite Realtime Openfire 4.4.1 allows XSS via the setup/setup-datasource-standard.jsp serverURL parameter. | 4.3 |
| 2020-03-18 | CVE-2019-20528 | Cross-site Scripting vulnerability in Igniterealtime Openfire 4.4.1 Ignite Realtime Openfire 4.4.1 allows XSS via the setup/setup-datasource-standard.jsp username parameter. | 4.3 |
| 2020-01-08 | CVE-2019-20366 | Cross-site Scripting vulnerability in Igniterealtime Openfire 4.4.4 An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via isTrustStore to Manage Store Contents. | 4.3 |
| 2020-01-08 | CVE-2019-20365 | Cross-site Scripting vulnerability in Igniterealtime Openfire 4.4.4 An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via search to the Users/Group search page. | 4.3 |
| 2020-01-08 | CVE-2019-20364 | Cross-site Scripting vulnerability in Igniterealtime Openfire 4.4.4 An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via cacheName to SystemCacheDetails.jsp. | 4.3 |
| 2020-01-08 | CVE-2019-20363 | Cross-site Scripting vulnerability in Igniterealtime Openfire 4.4.4 An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via alias to Manage Store Contents. | 4.3 |
| 2019-10-24 | CVE-2019-18394 | Server-Side Request Forgery (SSRF) vulnerability in Igniterealtime Openfire A Server Side Request Forgery (SSRF) vulnerability in FaviconServlet.java in Ignite Realtime Openfire through 4.4.2 allows attackers to send arbitrary HTTP GET requests. | 7.5 |