Login Request a demo
OP
Product
Openfire
by igniterealtime · last CVE Jan 26, 2026
On CISA KEVExploited in the wild
39
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities39In the news0Timeline
Severity mix
Critical 3High 3Medium 23Low 0
Severity
All severities39Critical3High3Medium23Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add Openfire to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-25421
9.8
2%
Mar 26
An issue in Ignite Realtime Openfire v.4.9.0 and before allows a remote attacker to escalate privileges via the ROOM_CACHE component
Affected: through 4.9.0
CVE-2021-45967
9.8
21%
Mar 18
An issue was discovered in Pascom Cloud Phone System before 7.20.x
Affected: before 4.5.0; 4.5.0
CVE-2019-18394
9.8
32%
Oct 24
A Server Side Request Forgery (SSRF) vulnerability in FaviconServlet.java in Ignite Realtime Openfire through 4.4.2 allows attackers to send arbitrary HTTP GET requests
Affected: through 4.4.2
Showing 3