GCVE - cpe:2.3:a:igniterealtime:openfire:4.4.4:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:igniterealtime:openfire:4.4.4:*:*:*:*:*:*:*

part: a version: 4.4.4 update: *

Vendor	Igniterealtime (`ebb69505-0c1d-5b48-b68e-f7064b76d233`)
Product	Openfire (`9a4163ac-d4bd-508d-aec2-523eb06a053e`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/igniterealtime/openfire`	purl2cpe	2026-06-01 10:13:44.274623
`pkg:rpm/opensuse/openfire`	purl2cpe	2026-06-01 10:13:44.274624

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2019-20366`	vulnerable	2026-06-08 05:13:40.490449	Details available An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via isTrustStore to Manage Store Contents. Published: 2020-01-08T16:26:28.000Z Updated: 2024-08-05T02:39:09.503Z Open on db.gcve.eu Reference links https://issues.igniterealtime.org/browse/OF-1955 https://github.com/igniterealtime/Openfire/pull/1561 https://cybersecurityworks.com/zerodays/cve-2019-20366-openfire.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-20365`	vulnerable	2026-06-08 05:13:40.489926	Details available An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via search to the Users/Group search page. Published: 2020-01-08T16:27:14.000Z Updated: 2024-08-05T02:39:09.854Z Open on db.gcve.eu Reference links https://issues.igniterealtime.org/browse/OF-1955 https://github.com/igniterealtime/Openfire/pull/1561 https://cybersecurityworks.com/zerodays/cve-2019-20365-openfire.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-20364`	vulnerable	2026-06-08 05:13:40.489589	Details available An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via cacheName to SystemCacheDetails.jsp. Published: 2020-01-08T16:27:41.000Z Updated: 2024-08-05T02:39:09.607Z Open on db.gcve.eu Reference links https://issues.igniterealtime.org/browse/OF-1955 https://github.com/igniterealtime/Openfire/pull/1561 https://cybersecurityworks.com/zerodays/cve-2019-20364-openfire.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-20363`	vulnerable	2026-06-08 05:13:40.489170	Details available An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via alias to Manage Store Contents. Published: 2020-01-08T16:27:50.000Z Updated: 2024-08-05T02:39:09.764Z Open on db.gcve.eu Reference links https://issues.igniterealtime.org/browse/OF-1955 https://github.com/igniterealtime/Openfire/pull/1561 https://cybersecurityworks.com/zerodays/cve-2019-20363-openfire.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.