Ignite Realtime vendor intelligence

Ignite Realtime Known Exploited Vulnerabilities

Track evidence-backed exploitation affecting Ignite Realtime products, including the gap beyond CISA KEV, confidence assessments, sensor observations, and practical response context.

Browse KEV feed

Total KEVs: 3; Known exploited vulnerabilities affecting Ignite Realtime products
In CISA KEV: 1; Records also listed in the official catalog
Beyond CISA KEV: 2; Additional exploited vulnerabilities absent from CISA KEV
Sensor Observed: 0; Ignite Realtime KEVs with sensor-observed exploitation activity

The catalog gap matters for Ignite Realtime exposure

Two of the three exploited Ignite Realtime vulnerabilities tracked by Previdian are not in CISA KEV. Teams relying on the official catalog alone would miss two-thirds of this vendor portfolio.

33%
Covered by CISA: 67%
Beyond CISA: 1
Product families

Attested Ignite Realtime vulnerabilities

3 known exploited vulnerabilities in this exploited-vulnerability portfolio. Search, then narrow it to official CISA coverage or the additional records Previdian tracks beyond the catalog.

How exploitation is verified

CVE / description	Product	Confidence	CISA KEV	Added
CVE-2019-18393 PluginServlet.java in Ignite Realtime Openfire through 4.4.2 does not ensure that retrieved files are located under the Openfire home directory,...	Openfire	High	Beyond CISA	27 Jul 2025
CVE-2019-18394 A Server Side Request Forgery (SSRF) vulnerability in FaviconServlet.java in Ignite Realtime Openfire through 4.4.2 allows attackers to send...	Openfire	High	Beyond CISA	24 Apr 2025
CVE-2023-32315 Openfire administration console authentication bypass	Openfire	Confirmed	In CISA	24 Aug 2023

Showing 3 of 3 on this page (3 Ignite Realtime known exploited vulnerabilities).

Recurring weakness patterns

Limitation and server-side request forgery (ssrf) account for three mapped occurrences across this Ignite Realtime KEV portfolio.

Browse all KEVs →

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CWE-918

Server-Side Request Forgery (SSRF)