Vulnerabilities

TI-2019-10705 CVE-2019-14362 · GHSA-fjgw-wf66-xqjj

Openbravo ERP before 3.0PR19Q1.3 is affected by Directory Traversal.

LOW 29

Openbravo ERP before 3.0PR19Q1.3 is affected by Directory Traversal.

CVSS 3.0MEDIUM 5.4 Network Low privileges No interaction EPSS 0.02135 Published 2019-07-28 No fix listed CWE-22

TI-2017-06849 CVE-2017-9437 · GHSA-gpx2-jmh8-p7jh

Openbravo Business Suite 3.0 is affected by SQL injection.

MEDIUM 41

Openbravo Business Suite 3.0 is affected by SQL injection.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01277 Published 2017-06-05 No fix listed CWE-89

TI-2013-03161 CVE-2013-3617 · GHSA-2gjx-c22x-h568

The XML API in Openbravo ERP 2.5, 3.0, and earlier allows remote authenticated users to…

LOW 36

The XML API in Openbravo ERP 2.5, 3.0, and earlier allows remote authenticated users to read arbitrary files via an XML document with an external entity declaration in conjunction with an entity reference to /ws/dal/ADUs…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.21074 Published 2013-11-02 No fix listed CWE-264

Vulnerabilities

Filters

Openbravo ERP before 3.0PR19Q1.3 is affected by Directory Traversal.

Openbravo Business Suite 3.0 is affected by SQL injection.

The XML API in Openbravo ERP 2.5, 3.0, and earlier allows remote authenticated users to…