영향받는 버전 라인
알려진 취약점
| CVE | 제목 | 영향 버전 | CVSS | 악용 | EPSS | 공개일 |
|---|---|---|---|---|---|---|
| CVE-2023-32315 | Openfire administration console authentication bypass | * | 8.6 | KEV | 100.0% | 2023-05-27 |
| CVE-2020-36956 | Openfire 4.6.0 - 'path' Stored XSS | ≤ 4.6.0 | 5.1 | — | 2026-01-27 | |
| CVE-2025-59154 | Openfire allows potential identity spoofing via unsafe CN parsing | * | 5.9 | — | 2025-09-16 | |
| CVE-2024-25420 | An issue in Ignite Realtime Openfire before 4.8.1 allows a remote attacker to escalate privileges via the admi... | * | 7.2 | — | 2024-03-26 | |
| CVE-2024-25421 | An issue in Ignite Realtime Openfire v.4.9.0 and before allows a remote attacker to escalate privileges via th... | * | 9.8 | — | 2024-03-26 | |
| CVE-2019-20363 | An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via alias to Manage Store Contents. | * | — | — | 2020-01-09 | |
| CVE-2019-20364 | An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via cacheName to SystemCacheDetails.jsp. | * | — | — | 2020-01-09 | |
| CVE-2019-20365 | An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via search to the Users/Group search page. | * | — | — | 2020-01-09 | |
| CVE-2019-20366 | An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via isTrustStore to Manage Store Contents. | * | — | — | 2020-01-09 | |
| CVE-2019-18394 | A Server Side Request Forgery (SSRF) vulnerability in FaviconServlet.java in Ignite Realtime Openfire through... | * | — | — | 2019-10-24 | |
| CVE-2019-18393 | PluginServlet.java in Ignite Realtime Openfire through 4.4.2 does not ensure that retrieved files are located... | * | — | — | 2019-10-24 | |
| CVE-2019-15488 | Ignite Realtime Openfire before 4.4.1 has reflected XSS via an LDAP setup test. | * | — | — | 2019-08-23 | |
| CVE-2018-11688 | Ignite Realtime Openfire before 3.9.2 is vulnerable to cross-site scripting, caused by improper validation of... | * | — | — | 2018-06-14 |
내 서버의 버전을 직접 추적하세요
InfraGuard 는 모든 서버에 설치된 소프트웨어 버전을 수집하고, 알려진 취약점이 있는 버전을 알려 줍니다. 자체 호스팅이라 데이터가 내 네트워크를 벗어나지 않습니다.
데이터: CVE List(CVE® Program), NVD, CISA KEV, FIRST EPSS(EPSS 는 https://www.first.org/epss 참고), endoflife.date. 소프트웨어 목록: awesome-selfhosted(CC BY-SA 3.0).