Ofbiz@10.04.05 Security Vulnerabilities and Issues — Ofbiz@10.04.05 CVE List

Lucene search

ApacheOfbiz10.04.05

2 matches found

CVE•added 2013/08/15 4:55 p.m.•51 views

CVE-2013-2250

Apache Open For Business Project (aka OFBiz) 10.04.01 through 10.04.05, 11.04.01 through 11.04.02, and 12.04.01 allows remote attackers to execute arbitrary Unified Expression Language (UEL) functions via JUEL metacharacters in unspecified parameters, related to nested expressions.

10CVSS7.6AI score0.12628EPSS

CVE•added 2013/08/15 4:55 p.m.•43 views

CVE-2013-2137

Cross-site scripting (XSS) vulnerability in the "View Log" screen in the Webtools application in Apache Open For Business Project (aka OFBiz) 10.04.01 through 10.04.05, 11.04.01 through 11.04.02, and 12.04.01 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

4.3CVSS5.8AI score0.03806EPSS