What’s Vulnerable › Vulnerabilities

CVE-2017-2815

• Severity: high (CVSS 8.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-05-15 · updated 2026-06-17
• Weakness: CWE-611

Description

An exploitable XML entity injection vulnerability exists in OpenFire User Import Export Plugin 2.6.0. A specially crafted web request can cause the retrieval of arbitrary files or denial of service. An authenticated attacker can send a crafted web request to trigger this vulnerability.

Affected products

• Talos Open Fire User Import Export Plugin: 2.6.0

References

• https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0316
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0316

Get alerted when CVE-2017-2815 or the next vulnerability affects your stack