What’s Vulnerable › Products

igniterealtime Openfire vulnerabilities

39 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your igniterealtime Openfire version is affected

Exploited igniterealtime Openfire vulnerabilities

• CVE-2023-32315 — Ignite Realtime Openfire Path Traversal Vulnerability

Latest igniterealtime Openfire vulnerabilities

• CVE-2020-36956 — Openfire 4.6.0 - 'path' Stored XSS (CVSS 6.4)
• CVE-2025-59154 — Openfire allows potential identity spoofing via unsafe CN parsing (CVSS 5.9)
• CVE-2024-25421 — (CVSS 9.8)
• CVE-2024-25420 — (CVSS 7.2)
• CVE-2023-32315 — Ignite Realtime Openfire Path Traversal Vulnerability (CVSS 7.5) — exploited
• CVE-2021-45967 — (CVSS 9.8)
• CVE-2020-35202 — (CVSS 5.4)
• CVE-2020-35201 — (CVSS 5.4)
• CVE-2020-35200 — (CVSS 6.1)
• CVE-2020-35199 — (CVSS 5.4)
• CVE-2020-35127 — (CVSS 5.4)
• CVE-2020-24604 — (CVSS 6.1)
• CVE-2020-24602 — (CVSS 6.1)
• CVE-2020-24601 — (CVSS 6.1)
• CVE-2019-20526 — (CVSS 6.1)
• CVE-2019-20525 — (CVSS 6.1)
• CVE-2019-20527 — (CVSS 6.1)
• CVE-2019-20528 — (CVSS 6.1)
• CVE-2019-20366 — (CVSS 6.1)
• CVE-2019-20365 — (CVSS 6.1)
• CVE-2019-20364 — (CVSS 6.1)
• CVE-2019-20363 — (CVSS 6.1)
• CVE-2019-18394 — (CVSS 9.8)
• CVE-2019-18393 — (CVSS 5.3)
• CVE-2019-15488 — (CVSS 6.1)