Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Igniterealtime Subscribe
Filtered by product User Import Export
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-2815 1 Igniterealtime 1 User Import Export 2022-04-19 5.5 MEDIUM 8.1 HIGH
An exploitable XML entity injection vulnerability exists in OpenFire User Import Export Plugin 2.6.0. A specially crafted web request can cause the retrieval of arbitrary files or denial of service. An authenticated attacker can send a crafted web request to trigger this vulnerability.