CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

Nuclei•added 2026/07/11 12:22 a.m.•64 views

Apache OFBiz <=16.11.07 - Cross-Site Scripting

Apache OFBiz 16.11.01 to 16.11.07 is vulnerable to cross-site scripting because data sent with contentId to /control/stream is not sanitized. id: CVE-2020-1943 info: name: Apache OFBiz =16.11.07 - Cross-Site Scripting author: pdteam severity: medium description: Apache OFBiz 16.11.01 to 16.11.07 ...

6.1CVSS6.3AI score0.97309EPSS

Exploits0References5

RedhatCVE•added 2025/05/22 5:41 p.m.•7 views

CVE-2020-1943

Data sent with contentId to /control/stream is not sanitized, allowing XSS attacks in Apache OFBiz 16.11.01 to 16.11.07...

6.1CVSS6AI score0.97309EPSS

Exploits0

Circl•added 2025/02/05 12:0 a.m.•274 views

CVE-2020-1943

creationtimestamp| type| source ---|---|--- 2025-02-05 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2025-02-05 2025-06-20 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-06-20 2025-11-11 00:00:00+00:00| seen| The Shadowserver...

6.1CVSS6.4AI score0.97309EPSS

In wildExploits0References2

CVE•added 2020/04/01 6:18 p.m.•77 views

CVE-2020-1943

CVE-2020-1943 affects Apache OFBiz 16.11.01–16.11.07. The vulnerability is a cross-site scripting flaw caused by unsanitized data sent with the contentId parameter to the /control/stream endpoint. Impact, as reported, is execution of malicious scripts in the victim’s browser (potential session-re...

6.1CVSS5.9AI score0.97309EPSS

In wildExploits0References4Affected Software1