Vulnerabilities in IPFire.org
18 resultsCVE-2025-34311HIGHIPFire < v2.29 Command Injection via Proxy Report CreationEPSS 12.7%CVE-2025-34309MEDIUMIPFire < v2.29 Stored XSS via Dynamic DNS HostEPSS 4.4%CVE-2025-34301MEDIUMIPFire < v2.29 Stored XSS via Location Group CreationEPSS 4.4%CVE-2025-34312HIGHIPFire < v2.29 Command Injection via URL Filter BlacklistEPSS 2.1%CVE-2025-34318MEDIUMIPFire < v2.29 Stored XSS via DNS Creation (proxy.cgi)EPSS 0.4%CVE-2025-34303MEDIUMIPFire < v2.29 Stored XSS via Whitelisted Host CreationEPSS 0.4%CVE-2025-34316MEDIUMIPFire < v2.29 Stored XSS via Mail Server SettingsEPSS 0.4%CVE-2025-34313MEDIUMIPFire < v2.29 Stored XSS via User Quota Rule URL FilterEPSS 0.4%CVE-2025-34315MEDIUMIPFire < v2.29 Stored XSS via Remote Syslog Server AddressEPSS 0.4%CVE-2025-34310MEDIUMIPFire < v2.29 Stored XSS via Quality of Service (QoS) SettingsEPSS 0.4%CVE-2025-34302MEDIUMIPFire < v2.29 Stored XSS via Service CreationEPSS 0.4%CVE-2025-34306MEDIUMIPFire < v2.29 Stored XSS via Default IP Search ValueEPSS 0.4%CVE-2025-34305MEDIUMIPFire < v2.29 Stored XSS via Multiple Methods in cleanhtml()EPSS 0.4%CVE-2025-34317MEDIUMIPFire < v2.29 Stored XSS via DNS Creation (dns.cgi)EPSS 0.4%CVE-2025-34307MEDIUMIPFire < v2.29 Stored XSS via Default Country SearchEPSS 0.4%CVE-2025-34308MEDIUMIPFire < v2.29 Stored XSS via Default Time SyncEPSS 0.4%CVE-2025-34314MEDIUMIPFire < v2.29 Stored XSS via Time Constraint Rule URL FilterEPSS 0.4%CVE-2025-34304HIGHIPFire < v2.29 SQL Injection via OpenVPN Connection LogsEPSS 0.4%