Openfire vulnerabilities

2 known vulnerabilities in Openfire from Igniterealtime. 2 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  openfire: Improper Check for Dropped Privileges

  CVE-2024-25420Mar 26, 2024IgniterealtimeEPSS 6.46%

  An issue in Ignite Realtime Openfire before 4.8.1 allows a remote attacker to escalate privileges via the admin.authorizedJIDs system property component.

• 7.5 High severity

  Ignite Realtime Openfire Path Traversal Exploited

  CVE-2023-32315May 26, 2023IgniterealtimeEPSS 100%

  Openfire is an XMPP server licensed under the Open Source Apache License. Openfire's administrative console, a web-based application, was found to be vulnerable to a path traversal attack via the setup environment. This permitted an unauthenticated user to use