CVE-2007-2975

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-06-01 · updated 2026-06-16
Weakness: CWE-264

Description

The admin console in Ignite Realtime Openfire 3.3.0 and earlier (formerly Wildfire) does not properly specify a filter mapping in web.xml, which allows remote attackers to gain privileges and execute arbitrary code by accessing functionality that is exposed through DWR, as demonstrated using the downloader.

Affected products

Ignite Realtime Openfire: through 3.3.0; 2.6.0, 2.6.1, 2.6.2, 3.0.0, 3.0.1, 3.1.0 (+6)

References

http://blogs.reucon.com/srt/2007/05/11/openfire_3_3_1_fixes_critical_security_issue.html
http://secunia.com/advisories/25427
http://www.igniterealtime.org/issues/browse/JM-1049
http://www.osvdb.org/36713
http://www.securityfocus.com/bid/24205
http://blogs.reucon.com/srt/2007/05/11/openfire_3_3_1_fixes_critical_security_issue.html
http://secunia.com/advisories/25427
http://www.igniterealtime.org/issues/browse/JM-1049
http://www.osvdb.org/36713
http://www.securityfocus.com/bid/24205

Get alerted when CVE-2007-2975 or the next vulnerability affects your stack