Lucene search
ApacheOfbiz*
6 matches found
CVE-2020-9496
XML-RPC request are vulnerable to unsafe deserialization and Cross-Site Scripting issues in Apache OFBiz 17.12.03
6.1CVSS6.1AI score0.92981EPSS
CVE-2019-0235
Apache OFBiz 17.12.01 is vulnerable to some CSRF attacks.
8.8CVSS8.6AI score0.26016EPSS
CVE-2020-1943
Data sent with contentId to /control/stream is not sanitized, allowing XSS attacks in Apache OFBiz 16.11.01 to 16.11.07.
6.1CVSS5.9AI score0.86811EPSS
CVE-2019-12426
an unauthenticated user could get access to information of some backend screens by invoking setSessionLocale in Apache OFBiz 16.11.01 to 16.11.06
5.3CVSS5.2AI score0.0302EPSS
CVE-2019-12425
Apache OFBiz 17.12.01 is vulnerable to Host header injection by accepting arbitrary host
7.5CVSS7.6AI score0.02178EPSS
CVE-2020-13923
IDOR vulnerability in the order processing feature from ecommerce component of Apache OFBiz before 17.12.04
5.3CVSS5.3AI score0.02534EPSS