CVE-2013-2250 in Open For Business Project信息

摘要

由 VulDB • 2026-06-28

Apache Open For Business Project（又名 OFBiz）10.04.01 至 10.04.05、11.04.01 至 11.04.02 以及 12.04.01 版本允许远程攻击者通过在未指定参数中使用 JUEL 元字符执行任意 Unified Expression Language (UEL) 函数，这与嵌套表达式有关。

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2013-02-19

披露

2013-08-15

管理

已接受

条目

VDB-64667

CPE

准备好

CWE

CWE-20 (已确认)

CVSS

10.0 (NVD)

EPSS

0.12138

KEV

否

活动

非常低

部门

Hospital, Lawfirm, ...

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2013-2250
NVD	https://nvd.nist.gov/vuln/detail/CVE-2013-2250
CVE Details	https://www.cvedetails.com/cve/CVE-2013-2250/

◂ 上一步一览下一步 ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!