Approved changes feed: RSS · Atom

cpe:2.3:a:igniterealtime:openfire:4.9.0:*:*:*:*:*:*:*

part: a version: 4.9.0 update: *

VendorIgniterealtime (ebb69505-0c1d-5b48-b68e-f7064b76d233)
ProductOpenfire (9a4163ac-d4bd-508d-aec2-523eb06a053e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/igniterealtime/openfire purl2cpe 2026-06-01 10:13:44.274711
pkg:rpm/opensuse/openfire purl2cpe 2026-06-01 10:13:44.274713

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-25420 vulnerable 2026-06-08 06:31:22.922694 Details available
An issue in Ignite Realtime Openfire before 4.8.1 allows a remote attacker to escalate privileges via the admin.authorizedJIDs system property component.
Published: 2024-03-26T00:00:00.000Z
Updated: 2025-11-11T13:09:26.855Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.