CVE-2005-4877

MEDIUM 4.3CVE-2005-4877 · Published 31/12/2005 · updated 16/06/2026

In short

CVE-2005-4877 is a MEDIUM (CVSS 4.3) vulnerability affecting openfire (ignite realtime).
Chance of exploitation in the next 30 days (EPSS): 0.84%, higher than 58.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
openfire ignite_realtime	`= 2.3.0`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in the login form (login.jsp) of the admin console in Openfire (formerly Wildfire) 2.3.0 Beta 2 allows remote attackers to inject arbitrary web script or HTML via Javascript events in the username parameter, a different vulnerability than CVE-2005-4876.

References

igniterealtime.org/issues/browse/JM-430
exchange.xforce.ibmcloud.com/vulnerabilities/44690

More vulnerabilities in openfire

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free