OP
Product
Openfire
On CISA KEVExploited in the wild
39
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 3Medium 23Low 0
Watch
Add Openfire to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-32315 In wildKEV | 7.5 | May 26 | Openfire administration console authentication bypass Affected: >= 3.10.0, < 4.6.8; >= 4.7.0, < 4.7.5 |
| CVE-2014-3451 | 7.5 | Aug 18 | OpenFire XMPP Server before 3.10 accepts self-signed certificates, which allows remote attackers to perform unspecified spoofing attacks Affected: through 3.9.3 |
| CVE-2024-25420 | 7.2 | Mar 26 | An issue in Ignite Realtime Openfire before 4.8.1 allows a remote attacker to escalate privileges via the admin.authorizedJIDs system property component Affected: through 4.9.0 |
Showing 3