Vulnerabilities > CVE-2023-49070 - Unspecified vulnerability in Apache Ofbiz

CVSS 9.8 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

apache

critical

NVD

Published: 2023-12-05

Updated: 2024-11-21

Summary

Pre-auth RCE in Apache Ofbiz 18.12.09. It's due to XML-RPC no longer maintained still present. This issue affects Apache OFBiz: before 18.12.10. Users are recommended to upgrade to version 18.12.10

Vulnerable Configurations

Part	Description	Count
Application	Apache Apache Ofbiz - Apache Ofbiz 09.04 Apache Ofbiz 9.04 Apache Ofbiz 09.04.01 Apache Ofbiz 9.04.01 Apache Ofbiz 9.04.02 Apache Ofbiz 10.04 Apache Ofbiz 10.04.01 Apache Ofbiz 10.04.02 Apache Ofbiz 10.04.03 Apache Ofbiz 10.04.04 Apache Ofbiz 10.04.05 Apache Ofbiz 10.04.06 Apache Ofbiz 11.04 Apache Ofbiz 11.04.01 Apache Ofbiz 11.04.02 Apache Ofbiz 11.04.03 Apache Ofbiz 11.04.04 Apache Ofbiz 11.04.05 Apache Ofbiz 11.04.06 Apache Ofbiz 12.04 Apache Ofbiz 12.04.01 Apache Ofbiz 12.04.02 Apache Ofbiz 12.04.03 Apache Ofbiz 12.04.04 Apache Ofbiz 12.04.05 Apache Ofbiz 12.04.06 Apache Ofbiz 13.07 Apache Ofbiz 13.07.01 Apache Ofbiz 13.07.02 Apache Ofbiz 13.07.03 Apache Ofbiz 16.11.01 Apache Ofbiz 16.11.02 Apache Ofbiz 16.11.03 Apache Ofbiz 16.11.04 Apache Ofbiz 16.11.05 Apache Ofbiz 16.11.06 Apache Ofbiz 16.11.07 Apache Ofbiz 17.12.01 Apache Ofbiz 17.12.03 Apache Ofbiz 17.12.04 Apache Ofbiz 17.12.05 Apache Ofbiz 17.12.06 Apache Ofbiz 17.12.07 Apache Ofbiz 17.12.08 Apache Ofbiz 17.12.09 Apache Ofbiz 18.12.01 Apache Ofbiz 18.12.02 Apache Ofbiz 18.12.03 Apache Ofbiz 18.12.04 Apache Ofbiz 18.12.05 Apache Ofbiz 18.12.06 Apache Ofbiz 18.12.07 Apache Ofbiz 18.12.09	54

Vulnerabilities > CVE-2023-49070 - Unspecified vulnerability in Apache Ofbiz

Summary

Vulnerable Configurations

Related news

References