What’s Vulnerable › Vulnerabilities

CVE-2021-45968

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 10.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-03-18 · updated 2026-06-17
• Weakness: CWE-918

Description

An issue was discovered in xmppserver jar in the XMPP Server component of the JIve platform, as used in Pascom Cloud Phone System before 7.20.x (and in other products). An endpoint in the backend Tomcat server of the Pascom allows SSRF, a related issue to CVE-2019-18394.

Affected products

• Jive before 2016.3.1: all versions
• Pascom Cloud Phone System: through 7.19

References

• https://jivesoftware.com/platform/
• https://kerbit.io/research/read/blog/4
• https://tutorialboy24.blogspot.com/2022/03/the-story-of-3-bugs-that-lead-to.html
• https://www.pascom.net/doc/en/release-notes/
• https://www.pascom.net/doc/en/release-notes/pascom19/
• https://jivesoftware.com/platform/
• https://kerbit.io/research/read/blog/4
• https://tutorialboy24.blogspot.com/2022/03/the-story-of-3-bugs-that-lead-to.html
• https://www.pascom.net/doc/en/release-notes/
• https://www.pascom.net/doc/en/release-notes/pascom19/

Get alerted when CVE-2021-45968 or the next vulnerability affects your stack