Tigase

tigase

2 CVEs • 2 products

Products (2)

Click to collapse

Toggle

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2014-2746 1Tigase 1Tigase May 6, 2026 Apr 11, 2014 N/A· v4 N/A· v3 7.8 HIGH· v2 net/IOService.java in Tigase before 5.2.1 does not properly restrict the processing of compressed XML elements, which allows remote attackers to cause a denial of service (resource consumption) via a crafted XMPP stream,...Show more net/IOService.java in Tigase before 5.2.1 does not properly restrict the processing of compressed XML elements, which allows remote attackers to cause a denial of service (resource consumption) via a crafted XMPP stream, aka an "xmppbomb" attack.Show less
CVE-2012-4670 1Tigase 1Tigase Xmpp Server Apr 29, 2026 Aug 25, 2012 N/A· v4 N/A· v3 6.4 MEDIUM· v2 Tigase XMPP Server before 5.1.0 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via a (1) Verify Response or (2) Authorization Response.

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2014-2746

1Tigase

May 6, 2026

Apr 11, 2014

N/A· v4

N/A· v3

7.8 HIGH· v2

net/IOService.java in Tigase before 5.2.1 does not properly restrict the processing of compressed XML elements, which allows remote attackers to cause a denial of service (resource consumption) via a crafted XMPP stream,...Show more

CVE-2012-4670

1Tigase

1Tigase Xmpp Server

Apr 29, 2026

Aug 25, 2012

N/A· v4

N/A· v3

6.4 MEDIUM· v2

Tigase XMPP Server before 5.1.0 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via a (1) Verify Response or (2) Authorization Response.