CVE-2004-2646

Medium severity, CVSS 5.0. EPSS: 3.6% chance of exploitation in the next 30 days.

The addUser function in UserManager.java in Free Web Chat 2.0 allows remote attackers to cause a denial of service (uncaught NullPointerException) via unknown attack vectors that cause the usrName variable to be null.

Published 2004-12-31. Last modified 2026-06-16.