Openbravo

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Openbravo records in CISA KEV

No Openbravo vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Openbravo Erp 3 records MEDIUM

Records

3 records

TI-2017-06849 CVE-2017-9437 · GHSA-gpx2-jmh8-p7jh

Openbravo Business Suite 3.0 is affected by SQL injection.

MEDIUM 41

Openbravo Business Suite 3.0 is affected by SQL injection.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01277 Published 2017-06-05 No fix listed CWE-89

TI-2013-03161 CVE-2013-3617 · GHSA-2gjx-c22x-h568

The XML API in Openbravo ERP 2.5, 3.0, and earlier allows remote authenticated users to…

LOW 36

The XML API in Openbravo ERP 2.5, 3.0, and earlier allows remote authenticated users to read arbitrary files via an XML document with an external entity declaration in conjunction with an entity reference to /ws/dal/ADUs…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.21074 Published 2013-11-02 No fix listed CWE-264

TI-2019-10705 CVE-2019-14362 · GHSA-fjgw-wf66-xqjj

Openbravo ERP before 3.0PR19Q1.3 is affected by Directory Traversal.

LOW 29

Openbravo ERP before 3.0PR19Q1.3 is affected by Directory Traversal.

CVSS 3.0MEDIUM 5.4 Network Low privileges No interaction EPSS 0.02135 Published 2019-07-28 No fix listed CWE-22

Open these records in search →

Critical	0
High	1
Medium	1
Low	1
No CVSS	0