| CVE-2019-0235 |
Apache OFBiz 17.12.01 is vulnerable to some CSRF attacks
|
Non notée
|
30 avr. 2020 |
| CVE-2019-12425 |
Apache OFBiz 17.12.01 is vulnerable to Host header injection by accepting arbitrary host
|
Non notée
|
30 avr. 2020 |
| CVE-2020-1943 |
Data sent with contentId to /control/stream is not sanitized, allowing XSS attacks in Apache OFBiz 16.11.01 to 16.11.07
|
Non notée
|
1 avr. 2020 |
| CVE-2019-12426 |
an unauthenticated user could get access to information of some backend screens by invoking setSessionLocale in Apache…
|
Non notée
|
6 févr. 2020 |