← All advisories

Medium severity6.1NVD Advisory· Published Jan 8, 2020· Updated Jun 17, 2026

CVE-2019-20365

CVE-2019-20365

Description

An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via search to the Users/Group search page.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Igniterealtime/Openfire2 versions
cpe:2.3:a:igniterealtime:openfire:4.4.4:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:igniterealtime:openfire:4.4.4:*:*:*:*:*:*:*
- (no CPE)range: = 4.4.4
Ignite Realtime/Openfiredescription

Patches

Vulnerability mechanics

References

3

cybersecurityworks.com/zerodays/cve-2019-20365-openfire.htmlnvdExploitThird Party Advisory
github.com/igniterealtime/Openfire/pull/1561nvdThird Party Advisory
issues.igniterealtime.org/browse/OF-1955nvdIssue TrackingVendor Advisory

News mentions

0

No linked articles in our index yet.