Igniterealtime Vulnérabilités

Chronologie

Taper

Not Defined10

Produit

Igniterealtime Openfire8
Igniterealtime Smack2

Contre-mesures

Official Fix10
Temporary Fix0
Workaround0
Unavailable0
Not Defined0

Exploitabilité

High2
Functional0
Proof-of-Concept6
Unproven0
Not Defined2

Vecteur d'accès

Not Defined0
Physical0
Local0
Adjacent0
Network10

Authentification

Not Defined0
High0
Low0
None10

Interaction de l'utilisateur

Not Defined0
Required4
None6

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤52
≤64
≤70
≤84
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤42
≤52
≤62
≤74
≤80
≤90
≤100

VulDB

≤10
≤20
≤30
≤40
≤52
≤64
≤70
≤84
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Fournisseur

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 jour

<1k0
<2k6
<5k4
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploiter aujourd'hui

<1k10
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploiter le volume du marché

🔴 CTI Activités

Affected Products (3): Openfire (7), Smack (2), Smack Api (1)

PubliéBaseTempVulnérabilitéProdExpConEPSSCTICVE
25/10/20147.37.0Igniterealtime Smack Api chiffrement faibleAutomation SoftwareNot DefinedOfficial Fix0.000740.03CVE-2014-5075
30/04/20145.35.1Igniterealtime Smack Parser authentification faibleInconnueNot DefinedOfficial Fix0.008570.00CVE-2014-0364
30/04/20146.56.2Igniterealtime Smack elévation de privilègesInconnueNot DefinedOfficial Fix0.002200.00CVE-2014-0363
01/05/20094.34.2Igniterealtime Openfire Console vulnérabilité inconnueInconnueNot DefinedOfficial Fix0.002420.00CVE-2009-1596
01/05/20094.34.0Igniterealtime Openfire IQAuthHandler.java authentification faibleInconnueProof-of-ConceptOfficial Fix0.005950.00CVE-2009-1595
23/03/20095.44.9Igniterealtime Openfire login.jsp elévation de privilègesInconnueProof-of-ConceptOfficial Fix0.003280.00CVE-2008-6511
23/03/20094.33.9Igniterealtime Openfire login.jsp cross site scriptingInconnueProof-of-ConceptOfficial Fix0.004630.00CVE-2008-6510
23/03/20097.36.6Igniterealtime Openfire sipark-log-summary.jsp sql injectionInconnueProof-of-ConceptOfficial Fix0.091050.00CVE-2008-6509
23/03/20097.37.0Igniterealtime Openfire directory traversalInconnueHighOfficial Fix0.609020.05CVE-2008-6508
09/02/20095.35.1Igniterealtime Openfire log.jsp directory traversalInconnueNot DefinedOfficial Fix0.020480.00CVE-2009-0497

◂ PrécédentAperçuSuivant ▸

Interested in the pricing of exploits?

See the underground prices here!