Login Request a demo
SM
Product
Smack
by Igniterealtime · last CVE Jan 12, 2017
3
CVEs
0
On KEV
5.9
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 0High 0Medium 1Low 0
Severity
All severities3Critical0High0Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Smack to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2016-10027
5.9
2%
Jan 12
Race condition in the XMPP library in Smack before 4.1.9, when the SecurityMode.required TLS setting has been set, allows man-in-the-middle attackers to bypass TLS protections and…
Affected: before 4.1.9
CVE-2014-0364
–
6%
Apr 30
The ParseRoster component in the Ignite Realtime Smack XMPP API before 4.0.0-rc1 does not verify the from attribute of a roster-query IQ stanza, which allows remote attackers to…
Affected: before 4.0.0
CVE-2014-0363
–
1%
Apr 30
The ServerTrustManager component in the Ignite Realtime Smack XMPP API before 4.0.0-rc1 does not verify basicConstraints and nameConstraints in X.509 certificate chains from SSL…
Affected: before 4.0.0
Showing 3