Lucene search
K

6 matches found

VulnCheck KEV
VulnCheck KEV
added 2023/12/29 12:0 a.m.1 views

VulnCheck KEV: CVE-2023-49070

Pre-auth RCE in Apache Ofbiz 18.12.09. It's due to XML-RPC no longer maintained still present. This issue affects Apache OFBiz: before 18.12.10. Users are recommended to upgrade to version 18.12.10...

9.8CVSS7.4AI score0.95442EPSS
Exploits11References1
NVD
NVD
added 2023/12/05 8:15 a.m.25 views

CVE-2023-49070

Pre-auth RCE in Apache Ofbiz 18.12.09. It's due to XML-RPC no longer maintained still present. This issue affects Apache OFBiz: before 18.12.10. Users are recommended to upgrade to version 18.12.10...

9.8CVSS0.95442EPSS
Exploits11References7
Cvelist
Cvelist
added 2023/12/05 8:5 a.m.27 views

CVE-2023-49070 Pre-auth RCE in Apache Ofbiz 18.12.09 due to XML-RPC still present

Pre-auth RCE in Apache Ofbiz 18.12.09. It's due to XML-RPC no longer maintained still present. This issue affects Apache OFBiz: before 18.12.10. Users are recommended to upgrade to version 18.12.10...

9.7AI score0.95442EPSS
Exploits11References6
OSV
OSV
added 2023/11/07 11:15 a.m.3 views

CVE-2023-46819

Missing Authentication in Apache Software Foundation Apache OFBiz when using the Solr plugin. This issue affects Apache OFBiz: before 18.12.09. Users are recommended to upgrade to version 18.12.09...

5.3CVSS5.7AI score0.01793EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2023/11/07 12:0 a.m.4 views

PT-2023-8562 · Apache · Apache Ofbiz

Name of the Vulnerable Software and Affected Versions: Apache OFBiz versions prior to 18.12.09 Description: The issue is related to missing authentication in the Solr plugin of Apache OFBiz, allowing a remote attacker to modify protected information. It is estimated that around 1,891 devices are...

5.3CVSS7.4AI score0.01793EPSS
Exploits0References7
CNNVD
CNNVD
added 2023/11/07 12:0 a.m.2 views

Apache OFBiz 访问控制错误漏洞

Apache OFBiz is the United States Apache Apache Foundation of a set of enterprise resource planning ERP system. The system provides a set of Java-based Web application components and tools. An access control error vulnerability exists in Apache OFBiz versions prior to 18.12.09 that stems from a...

5.3CVSS6.9AI score0.01793EPSS
Exploits0References8
Rows per page
Query Builder