Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-69474
HistorySep 02, 2022 - 12:00 a.m.

Apache OFBiz Cross-Site Scripting Vulnerability (CNVD-2022-69474)

2022-09-0200:00:00
China National Vulnerability Database
www.cnvd.org.cn
5
apache ofbiz
erp
xss
vulnerability
security
attack

0.002 Low

EPSS

Percentile

55.3%

Apache OFBiz is an enterprise resource planning (ERP) system from the Apache Foundation in the United States. The system provides a suite of Java-based web application components and tools. Apache OFBiz 18.12.05 and earlier versions contain a security vulnerability that can be exploited by unauthenticated attackers to perform stored XSS attacks in order to inject malicious loads and execute with stored XS.

CPENameOperatorVersion
apache ofbizle18.12.05

0.002 Low

EPSS

Percentile

55.3%

Related for CNVD-2022-69474