Show filters
41 Total Results
Displaying 11-20 of 41
Sort by:
Attacker Value
Unknown
CVE-2020-24604
Disclosure Date: September 02, 2020 (last updated February 22, 2025)
A Reflected XSS vulnerability was discovered in Ignite Realtime Openfire version 4.5.1. The XSS vulnerability allows remote attackers to inject arbitrary web script or HTML via the GET request "searchName", "searchValue", "searchDescription", "searchDefaultValue","searchPlugin", "searchDescription" and "searchDynamic" in server-properties.jsp and security-audit-viewer.jsp
0
Attacker Value
Unknown
CVE-2020-24601
Disclosure Date: September 02, 2020 (last updated February 22, 2025)
In Ignite Realtime Openfire 4.5.1 a Stored Cross-site Vulnerability allows an attacker to execute an arbitrary malicious URL via the vulnerable POST parameter searchName", "alias" in the import certificate trusted page
0
Attacker Value
Unknown
CVE-2019-20525
Disclosure Date: March 19, 2020 (last updated February 21, 2025)
Ignite Realtime Openfire 4.4.1 allows XSS via the setup/setup-datasource-standard.jsp driver parameter.
0
Attacker Value
Unknown
CVE-2019-20526
Disclosure Date: March 19, 2020 (last updated February 21, 2025)
Ignite Realtime Openfire 4.4.1 allows XSS via the setup/setup-datasource-standard.jsp password parameter.
0
Attacker Value
Unknown
CVE-2019-20527
Disclosure Date: March 19, 2020 (last updated February 21, 2025)
Ignite Realtime Openfire 4.4.1 allows XSS via the setup/setup-datasource-standard.jsp serverURL parameter.
0
Attacker Value
Unknown
CVE-2019-20528
Disclosure Date: March 18, 2020 (last updated February 21, 2025)
Ignite Realtime Openfire 4.4.1 allows XSS via the setup/setup-datasource-standard.jsp username parameter.
0
Attacker Value
Unknown
CVE-2019-20365
Disclosure Date: January 08, 2020 (last updated February 21, 2025)
An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via search to the Users/Group search page.
0
Attacker Value
Unknown
CVE-2019-20366
Disclosure Date: January 08, 2020 (last updated February 21, 2025)
An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via isTrustStore to Manage Store Contents.
0
Attacker Value
Unknown
CVE-2019-20364
Disclosure Date: January 08, 2020 (last updated February 21, 2025)
An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via cacheName to SystemCacheDetails.jsp.
0
Attacker Value
Unknown
CVE-2019-20363
Disclosure Date: January 08, 2020 (last updated February 21, 2025)
An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via alias to Manage Store Contents.
0
