ejabberd vulnerabilities (Debian)

8 vulnerabilities.

• ejabberd Debian User Impersonation/Authorization Bypass in XMPP Server ejabberd CVE-2026-104733 Fix available 7.4 HighOctober 2, 2026
• ejabberd Debian ejabberd before 2.1.13 does not enforce the starttls_required setting when compression is used,... CVE-2014-8760 Fix available 5.0 MediumOctober 23, 2014
• ejabberd Debian The TLS driver in ejabberd before 2.1.12 supports (1) SSLv2 and (2) weak SSL ciphers, which makes... CVE-2013-6169 Fix available 4.3 MediumOctober 10, 2013
• ejabberd Debian Ejabberd DoS via malformed stanza CVE-2011-4320 Fix available 4.0 MediumFebruary 18, 2012
• ejabberd Debian expat_erl.c in ejabberd before 2.1.7 and 3.x before 3.0.0-alpha-3, and exmpp before 0.9.7, does... CVE-2011-1753 Fix available 5.0 MediumMay 31, 2011
• ejabberd Debian ejabberd_c2s.erl in ejabberd before 2.1.3 allows remote attackers to cause a denial of service ... CVE-2010-0305 Fix available 5.0 MediumFebruary 3, 2010
• ejabberd Debian Cross-site scripting (XSS) vulnerability in ejabberd before 2.0.4 allows remote attackers to... CVE-2009-0934 Fix available 4.3 MediumMarch 18, 2009
• ejabberd Debian Unspecified vulnerability in the mod_roster_odbc module in ejabberd before 1.1.3 has unknown... CVE-2007-0903 Fix available 10.0 HighFebruary 13, 2007