Process-one ejabberd 2.1.8
Approved changes feed: RSS · Atom
cpe:2.3:a:process-one:ejabberd:2.1.8:*:*:*:*:*:*:*
part: a version: 2.1.8 update: *
| Vendor | Process One (48c06a85-b915-5f0d-87be-f5a0d2b23a14) |
|---|---|
| Product | Ejabberd (e2fdbc79-92b3-50e4-9290-ae477dd480a5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/ejabberd |
purl2cpe | 2026-06-01 10:11:48.483715 |
pkg:deb/ubuntu/ejabberd |
purl2cpe | 2026-06-01 10:11:48.483716 |
pkg:github/processone/ejabberd |
purl2cpe | 2026-06-01 10:11:48.483718 |
pkg:rpm/fedora/ejabberd |
purl2cpe | 2026-06-01 10:11:48.483719 |
pkg:rpm/opensuse/ejabberd |
purl2cpe | 2026-06-01 10:11:48.483720 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2013-6169 |
vulnerable | 2026-06-08 05:04:55.516117 |
Details available
The TLS driver in ejabberd before 2.1.12 supports (1) SSLv2 and (2) weak SSL ciphers, which makes it easier for remote attackers to obtain sensitive information via a brute-force attack.
Published: 2013-10-17T23:00:00.000Z
Updated: 2024-09-16T19:36:22.414Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4320 |
vulnerable | 2026-06-08 04:59:30.391829 |
Details available
The mod_pubsub module (mod_pubsub.erl) in ejabberd 2.1.8 and 3.0.0-alpha-3 allows remote authenticated users to cause a denial of service (infinite loop) via a stanza with a publish tag that lacks a node attribute.
Published: 2012-02-18T00:00:00.000Z
Updated: 2024-08-07T00:01:51.574Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.