Apache Ofbiz Vulnerabilidades

Curso de tempo

Versão

16.11.05	6
18.12.0	5
18.12.1	5
18.12.2	5
18.12.3	5

Medidas

Official Fix	22
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	12

Explorabilidade

High	1
Functional	0
Proof-of-Concept	2
Unproven	0
Not Defined	31

Tipo de acesso

Not Defined	0
Physical	0
Local	0
Adjacent	7
Network	27

Autenticação

Not Defined	0
High	0
Low	7
None	27

Actividade do utilizador

Not Defined	0
Required	8
None	26

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	1
≤5	2
≤6	8
≤7	9
≤8	7
≤9	5
≤10	2

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	1
≤5	3
≤6	11
≤7	6
≤8	6
≤9	5
≤10	2

VulDB

≤1	0
≤2	0
≤3	0
≤4	1
≤5	7
≤6	5
≤7	10
≤8	9
≤9	0
≤10	2

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	4
≤7	4
≤8	5
≤9	1
≤10	11

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Fabricante

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Explorar 0 dia

<1k	0
<2k	0
<5k	0
<10k	16
<25k	17
<50k	1
<100k	0
≥100k	0

Explorar hoje

<1k	15
<2k	3
<5k	9
<10k	6
<25k	1
<50k	0
<100k	0
≥100k	0

Affected Versions (41): 10.04.01, 11.04.01, 11.04.02, 11.04.03, 11.04.04, 12.04.01, 12.04.02, 12.04.03, 12.04.05, 12.04.06, 13.07.02, 16.11.01, 16.11.02, 16.11.03, 16.11.04, 16.11.05, 16.11.06, 16.11.07, 17.12, 17.12.01, 17.12.03, 17.12.05, 17.12.06, 17.12.07, 17.12.1, 17.12.2, 17.12.3, 18.12, 18.12.05, 18.12.08, 18.12.1, 18.12.2, 18.12.3, 18.12.4, 18.12.5, 18.12.6, 18.12.7, 18.12.8, 18.12.9, 18.12.11, 18.12.12

Link to Product Website: https://www.apache.org/

Publicado em	Base	Temp	Vulnerabilidade	0day	Hoje	Exp	Mas	CTI	CVE
08/05/2024	6.3	6.0	Apache OFBiz Directório Traversal	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.45	CVE-2024-32113
28/02/2024	6.3	6.0	Apache OFBiz Directório Traversal	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2024-25065
21/02/2024	5.3	5.1	Apache OFBiz createRegister Divulgação de Informação	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.05	CVE-2024-23946
26/12/2023	8.5	8.4	Apache OFBiz Fraca autenticação	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2023-51467
26/12/2023	6.9	6.7	Apache OFBiz direitos alargados	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2023-50968
05/12/2023	8.5	8.2	Apache OFBiz direitos alargados	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.04	CVE-2023-49070
07/11/2023	5.8	5.7	Apache OFBiz Fraca autenticação	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2023-46819
11/04/2023	3.5	3.5	Apache OFBiz Directório Traversal	$5k-$25k	$0-$5k	Not Defined	Not Defined	0.02	CVE-2022-47501
02/09/2022	6.9	6.9	Apache OFBiz Ecommerce Plugin Privilege Escalation	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.04	CVE-2022-25813
02/09/2022	7.6	7.5	Apache OFBiz Solr Plugin direitos alargados	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-29063