CVE-2015-7707: Ignite Realtime Openfire

Medium severity, CVSS 6.5. EPSS: 6% chance of exploitation in the next 30 days.

Ignite Realtime Openfire 3.10.2 allows remote authenticated users to gain administrator access via the isadmin parameter to user-edit-form.jsp.

Affected products

• Ignite Realtime Openfire: version 3.10.2 only

Published 2015-10-05. Last modified 2026-06-17.