Unrated severityNVD Advisory· Published Mar 23, 2009· Updated Jun 16, 2026
CVE-2008-6511
CVE-2008-6511
Description
Open redirect vulnerability in login.jsp in Openfire 3.6.0a and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the url parameter.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
26cpe:2.3:a:igniterealtime:openfire:*:*:*:*:*:*:*:*+ 24 more
- cpe:2.3:a:igniterealtime:openfire:*:*:*:*:*:*:*:*range: <=3.6.0a
- cpe:2.3:a:igniterealtime:openfire:2.6.0:*:*:*:*:*:*:*
- cpe:2.3:a:igniterealtime:openfire:2.6.1:*:*:*:*:*:*:*
- cpe:2.3:a:igniterealtime:openfire:2.6.2:*:*:*:*:*:*:*
- cpe:2.3:a:igniterealtime:openfire:3.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:igniterealtime:openfire:3.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:igniterealtime:openfire:3.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:igniterealtime:openfire:3.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:igniterealtime:openfire:3.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:igniterealtime:openfire:3.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:igniterealtime:openfire:3.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:igniterealtime:openfire:3.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:igniterealtime:openfire:3.2.4:*:*:*:*:*:*:*
- cpe:2.3:a:igniterealtime:openfire:3.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:igniterealtime:openfire:3.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:igniterealtime:openfire:3.3.3:*:*:*:*:*:*:*
- cpe:2.3:a:igniterealtime:openfire:3.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:igniterealtime:openfire:3.4.1:*:*:*:*:*:*:*
- cpe:2.3:a:igniterealtime:openfire:3.4.3:*:*:*:*:*:*:*
- cpe:2.3:a:igniterealtime:openfire:3.4.4:*:*:*:*:*:*:*
- cpe:2.3:a:igniterealtime:openfire:3.4.5:*:*:*:*:*:*:*
- cpe:2.3:a:igniterealtime:openfire:3.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:igniterealtime:openfire:3.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:igniterealtime:openfire:3.5.2:*:*:*:*:*:*:*
- cpe:2.3:a:igniterealtime:openfire:3.6.0:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
3News mentions
0No linked articles in our index yet.