Vulnerabilities (CVE)

Filtered by vendor Igniterealtime Subscribe
Total 41 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2009-1595 1 Igniterealtime 1 Openfire 2023-12-10 4.0 MEDIUM N/A
The jabber:iq:auth implementation in IQAuthHandler.java in Ignite Realtime Openfire before 3.6.4 allows remote authenticated users to change the passwords of arbitrary accounts via a modified username element in a passwd_change action.