Overview 26 matches · 0 in Waratek scope · 0 protected · 1 exploited · 0 CISA KEV · 9 public PoC · 2 EPSS ≥ 0.5
26matches
0in Waratek scope0.0%
0protected0.0%
1exploited3.8%
0CISA KEV0.0%
9public PoC34.6%
2EPSS ≥ 0.57.7%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
0
0.0%
Not applicable
26
100.0%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
26
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
1
3.8%
Working exploit published
8
30.8%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
17
65.4%
split by
peak 12 / year
20096
Not applicable6
High2
Medium4
not blocked6
Working exploit published5
No public exploit1
20100
20110
20120
20130
20142
Not applicable2
Medium2
not blocked2
No public exploit2
20153
Not applicable3
Medium3
not blocked3
Working exploit published3
20160
20171
Not applicable1
High1
not blocked1
No public exploit1
20181
Not applicable1
High1
not blocked1
No public exploit1
20190
202012
Not applicable12
High1
Medium11
not blocked12
No public exploit12
20210
20221
Not applicable1
Critical1
not blocked1
Exploited1
2010201220142016201820202022
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2021-45967 | Critical | 2022-03-18 | Not applicable | Exploited | An issue was discovered in Pascom Cloud Phone System before 7.20.x. A configuration error between NGINX and a backend Tomcat server leads to a path traversal in the Tomcat server, exposing unintended endpoints. |
| CVE-2020-35202 | Medium | 2020-12-12 | Not applicable | No public exploit | Ignite Realtime Openfire 4.6.0 has plugins/dbaccess/db-access.jsp sql Stored XSS. |
| CVE-2020-35201 | Medium | 2020-12-12 | Not applicable | No public exploit | Ignite Realtime Openfire 4.6.0 has create-bookmark.jsp users Stored XSS. |
| CVE-2020-35200 | Medium | 2020-12-12 | Not applicable | No public exploit | Ignite Realtime Openfire 4.6.0 has plugins/clientcontrol/spark-form.jsp Reflective XSS. |
| CVE-2020-35199 | Medium | 2020-12-12 | Not applicable | No public exploit | Ignite Realtime Openfire 4.6.0 has create-bookmark.jsp groupchatJID Stored XSS. |
| CVE-2020-35127 | Medium | 2020-12-11 | Not applicable | No public exploit | Ignite Realtime Openfire 4.6.0 has plugins/bookmarks/create-bookmark.jsp Stored XSS. |
| CVE-2020-24604 | Medium | 2020-09-02 | Not applicable | No public exploit | A Reflected XSS vulnerability was discovered in Ignite Realtime Openfire version 4.5.1. The XSS vulnerability allows remote attackers to inject arbitrary web script or HTML via the GET request "searchName", "searchValue", "searchDescription", "searchDefaultValue","searchPlugin", "searchDescription" and "searchDynamic" in server-properties.jsp and security-audit-viewer.jsp |
| CVE-2020-24602 | Medium | 2020-09-02 | Not applicable | No public exploit | Ignite Realtime Openfire 4.5.1 has a reflected Cross-site scripting vulnerability which allows an attacker to execute arbitrary malicious URL via the vulnerable GET parameter searchName", "searchValue", "searchDescription", "searchDefaultValue","searchPlugin", "searchDescription" and "searchDynamic" in the Server Properties and Security Audit Viewer JSP page |
| CVE-2020-24601 | Medium | 2020-09-02 | Not applicable | No public exploit | In Ignite Realtime Openfire 4.5.1 a Stored Cross-site Vulnerability allows an attacker to execute an arbitrary malicious URL via the vulnerable POST parameter searchName", "alias" in the import certificate trusted page |
| CVE-2020-12772 | High | 2020-05-12 | Not applicable | No public exploit | An issue was discovered in Ignite Realtime Spark 2.8.3 (and the ROAR plugin for it) on Windows. A chat message can include an IMG element with a SRC attribute referencing an external host's IP address. Upon access to this external host, the (NT)LM hashes of the user are sent with the HTTP request. This allows an attacker to collect these hashes, crack them, and potentially compromise the computer. (ROAR can be configured for automatic access. Also, access can occur if the user clicks.) |
| CVE-2019-20365 | Medium | 2020-01-08 | Not applicable | No public exploit | An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via search to the Users/Group search page. |
| CVE-2019-20364 | Medium | 2020-01-08 | Not applicable | No public exploit | An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via cacheName to SystemCacheDetails.jsp. |
| CVE-2019-20363 | Medium | 2020-01-08 | Not applicable | No public exploit | An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via alias to Manage Store Contents. |
| CVE-2017-2815 | High | 2018-05-15 | Not applicable | No public exploit | An exploitable XML entity injection vulnerability exists in OpenFire User Import Export Plugin 2.6.0. A specially crafted web request can cause the retrieval of arbitrary files or denial of service. An authenticated attacker can send a crafted web request to trigger this vulnerability. |
| CVE-2014-3451 | High | 2017-08-18 | Not applicable | No public exploit | OpenFire XMPP Server before 3.10 accepts self-signed certificates, which allows remote attackers to perform unspecified spoofing attacks. |
| CVE-2015-7707 | Medium | 2015-10-05 | Not applicable | Working exploit published | Ignite Realtime Openfire 3.10.2 allows remote authenticated users to gain administrator access via the isadmin parameter to user-edit-form.jsp. |
| CVE-2015-6973 | Medium | 2015-09-16 | Not applicable | Working exploit published | Multiple cross-site request forgery (CSRF) vulnerabilities in Ignite Realtime Openfire 3.10.2 allow remote attackers to hijack the authentication of administrators for requests that (1) change a password via a crafted request to user-password.jsp, (2) add users via a crafted request to user-create.jsp, (3) edit server settings or (4) disable SSL on the server via a crafted request to server-props.jsp, or (5) add clients via a crafted request to plugins/clientcontrol/permitted-clients.jsp. |
| CVE-2015-6972 | Medium | 2015-09-16 | Not applicable | Working exploit published | Multiple cross-site scripting (XSS) vulnerabilities in Ignite Realtime Openfire 3.10.2 allow remote attackers to inject arbitrary web script or HTML via the (1) groupchatName parameter to plugins/clientcontrol/create-bookmark.jsp; the (2) urlName parameter to plugins/clientcontrol/create-bookmark.jsp; the (3) hostname parameter to server-session-details.jsp; or the (4) search parameter to group-summary.jsp. |
| CVE-2014-0364 | Medium | 2014-04-30 | Not applicable | No public exploit | The ParseRoster component in the Ignite Realtime Smack XMPP API before 4.0.0-rc1 does not verify the from attribute of a roster-query IQ stanza, which allows remote attackers to spoof IQ responses via a crafted attribute. |
| CVE-2014-0363 | Medium | 2014-04-30 | Not applicable | No public exploit | The ServerTrustManager component in the Ignite Realtime Smack XMPP API before 4.0.0-rc1 does not verify basicConstraints and nameConstraints in X.509 certificate chains from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate chain. |
| CVE-2009-1596 | Medium | 2009-05-11 | Not applicable | No public exploit | Ignite Realtime Openfire before 3.6.5 does not properly implement the register.password (aka canChangePassword) console configuration setting, which allows remote authenticated users to bypass intended policy and change their own passwords via a passwd_change IQ packet. |
| CVE-2008-6511 | Medium | 2009-03-23 | Not applicable | Working exploit published | Open redirect vulnerability in login.jsp in Openfire 3.6.0a and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the url parameter. |
| CVE-2008-6510 | Medium | 2009-03-23 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in login.jsp in the Admin Console in Openfire 3.6.0a and earlier allows remote attackers to inject arbitrary web script or HTML via the url parameter. |
| CVE-2008-6509 | High | 2009-03-23 | Not applicable | Working exploit published | SQL injection vulnerability in CallLogDAO in SIP Plugin in Openfire 3.6.0a and earlier allows remote attackers to execute arbitrary SQL commands via the type parameter to sipark-log-summary.jsp. |
| CVE-2008-6508 | High | 2009-03-23 | Not applicable | Working exploit published | Directory traversal vulnerability in the AuthCheck filter in the Admin Console in Openfire 3.6.0a and earlier allows remote attackers to bypass authentication and access the admin interface via a .. (dot dot) in a URI that matches the Exclude-Strings list, as demonstrated by a /setup/setup-/.. sequence in a URI. |
| CVE-2009-0497 | Medium | 2009-02-10 | Not applicable | Working exploit published | Directory traversal vulnerability in log.jsp in Ignite Realtime Openfire 3.6.2 allows remote attackers to read arbitrary files via a ..\ (dot dot backslash) in the log parameter. |