2019-08-23 15:15:11 2019-08-26 23:02:31

Ignite Realtime Openfire before 4.4.1 has reflected XSS via an LDAP setup test.

Vector

NETWORK

Complexity

MEDIUM

Authentication

NONE

Confidentiality

NONE

Integrity

PARTIAL

Availability

NONE
Igniterealtime Openfire 3.3.0 (not an official CPE) Igniterealtime Openfire 3.3.1 (not an official CPE) Igniterealtime Openfire 3.3.2 (not an official CPE) Igniterealtime Openfire 3.3.3 (not an official CPE) Igniterealtime Openfire 3.4.0 (not an official CPE) Igniterealtime Openfire 3.4.1 (not an official CPE) Igniterealtime Openfire 3.4.2 (not an official CPE) Igniterealtime Openfire 3.4.3 (not an official CPE) Igniterealtime Openfire 3.4.4 (not an official CPE) Igniterealtime Openfire 3.4.5 (not an official CPE) Igniterealtime Openfire 3.5.0 (not an official CPE) Igniterealtime Openfire 3.5.1 (not an official CPE) Igniterealtime Openfire 3.5.2 (not an official CPE) Igniterealtime Openfire 3.6.0 - (not an official CPE) Igniterealtime Openfire 3.6.0 Alpha (not an official CPE) Igniterealtime Openfire 3.6.1 (not an official CPE) Igniterealtime Openfire 3.6.2 (not an official CPE) Igniterealtime Openfire 3.6.3 (not an official CPE) Igniterealtime Openfire 3.6.4 (not an official CPE) Igniterealtime Openfire 3.7.0 - (not an official CPE) Igniterealtime Openfire 3.7.0 Beta (not an official CPE) Igniterealtime Openfire 3.7.1 (not an official CPE) Igniterealtime Openfire 3.8.0 (not an official CPE) Igniterealtime Openfire 3.8.1 (not an official CPE) Igniterealtime Openfire 3.8.2 (not an official CPE) Igniterealtime Openfire 3.9.0 (not an official CPE) Igniterealtime Openfire 3.9.1 Igniterealtime Openfire 3.9.2 Igniterealtime Openfire 3.9.3 (not an official CPE) Igniterealtime Openfire 3.10.0 (not an official CPE) Igniterealtime Openfire 3.10.1 (not an official CPE) Igniterealtime Openfire 3.10.2 (not an official CPE) Igniterealtime Openfire 3.10.3 (not an official CPE) Igniterealtime Openfire 4.0.0 - (not an official CPE) Igniterealtime Openfire 4.0.0 Beta (not an official CPE) Igniterealtime Openfire 4.0.1 (not an official CPE) Igniterealtime Openfire 4.0.2 (not an official CPE) Igniterealtime Openfire 4.0.3 (not an official CPE) Igniterealtime Openfire 4.0.4 (not an official CPE) Igniterealtime Openfire 4.1.0 - (not an official CPE) Igniterealtime Openfire 4.1.0 Beta (not an official CPE) Igniterealtime Openfire 4.1.1 (not an official CPE) Igniterealtime Openfire 4.1.2 (not an official CPE) Igniterealtime Openfire 4.1.3 (not an official CPE) Igniterealtime Openfire 4.3.2 (not an official CPE)