Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2014-0232
Modified
More InfoOfficial Page
Source-secalert@redhat.com
View Known Exploited Vulnerability (KEV) details
Published At-22 Aug, 2014 | 14:55
Updated At-06 May, 2026 | 22:30

Multiple cross-site scripting (XSS) vulnerabilities in framework/common/webcommon/includes/messages.ftl in Apache OFBiz 11.04.01 before 11.04.05 and 12.04.01 before 12.04.04 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, which are not properly handled in a (1) result or (2) error message.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary2.04.3MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
Type: Primary
Version: 2.0
Base score: 4.3
Base severity: MEDIUM
Vector:
AV:N/AC:M/Au:N/C:N/I:P/A:N
CPE Matches
The Apache Software Foundation
apache
>>ofbiz>>12.04.01
cpe:2.3:a:apache:ofbiz:12.04.01:*:*:*:*:*:*:*
The Apache Software Foundation
apache
>>ofbiz>>12.04.02
cpe:2.3:a:apache:ofbiz:12.04.02:*:*:*:*:*:*:*
The Apache Software Foundation
apache
>>ofbiz>>12.04.03
cpe:2.3:a:apache:ofbiz:12.04.03:*:*:*:*:*:*:*
The Apache Software Foundation
apache
>>ofbiz>>11.04.01
cpe:2.3:a:apache:ofbiz:11.04.01:*:*:*:*:*:*:*
The Apache Software Foundation
apache
>>ofbiz>>11.04.02
cpe:2.3:a:apache:ofbiz:11.04.02:*:*:*:*:*:*:*
The Apache Software Foundation
apache
>>ofbiz>>11.04.03
cpe:2.3:a:apache:ofbiz:11.04.03:*:*:*:*:*:*:*
The Apache Software Foundation
apache
>>ofbiz>>11.04.04
cpe:2.3:a:apache:ofbiz:11.04.04:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-79Primarynvd@nist.gov
CWE ID: CWE-79
Type: Primary
Source: nvd@nist.gov
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
http://ofbiz.apache.org/download.html#vulnerabilitiessecalert@redhat.com
Patch
Vendor Advisory
http://packetstormsecurity.com/files/127929/Apache-OFBiz-11.04.04-12.04.03-Cross-Site-Scripting.htmlsecalert@redhat.com
N/A
http://seclists.org/oss-sec/2014/q3/405secalert@redhat.com
N/A
http://secunia.com/advisories/60807secalert@redhat.com
N/A
http://svn.apache.org/viewvc?view=revision&revision=r1608698secalert@redhat.com
Patch
http://www.securityfocus.com/archive/1/533163/100/0/threadedsecalert@redhat.com
N/A
http://www.securityfocus.com/bid/69286secalert@redhat.com
N/A
http://www.securitytracker.com/id/1030739secalert@redhat.com
N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/95356secalert@redhat.com
N/A
http://ofbiz.apache.org/download.html#vulnerabilitiesaf854a3a-2127-422b-91ae-364da2661108
Patch
Vendor Advisory
http://packetstormsecurity.com/files/127929/Apache-OFBiz-11.04.04-12.04.03-Cross-Site-Scripting.htmlaf854a3a-2127-422b-91ae-364da2661108
N/A
http://seclists.org/oss-sec/2014/q3/405af854a3a-2127-422b-91ae-364da2661108
N/A
http://secunia.com/advisories/60807af854a3a-2127-422b-91ae-364da2661108
N/A
http://svn.apache.org/viewvc?view=revision&revision=r1608698af854a3a-2127-422b-91ae-364da2661108
Patch
http://www.securityfocus.com/archive/1/533163/100/0/threadedaf854a3a-2127-422b-91ae-364da2661108
N/A
http://www.securityfocus.com/bid/69286af854a3a-2127-422b-91ae-364da2661108
N/A
http://www.securitytracker.com/id/1030739af854a3a-2127-422b-91ae-364da2661108
N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/95356af854a3a-2127-422b-91ae-364da2661108
N/A
Hyperlink: http://ofbiz.apache.org/download.html#vulnerabilities
Source: secalert@redhat.com
Resource:
Patch
Vendor Advisory
Hyperlink: http://packetstormsecurity.com/files/127929/Apache-OFBiz-11.04.04-12.04.03-Cross-Site-Scripting.html
Source: secalert@redhat.com
Resource: N/A
Hyperlink: http://seclists.org/oss-sec/2014/q3/405
Source: secalert@redhat.com
Resource: N/A
Hyperlink: http://secunia.com/advisories/60807
Source: secalert@redhat.com
Resource: N/A
Hyperlink: http://svn.apache.org/viewvc?view=revision&revision=r1608698
Source: secalert@redhat.com
Resource:
Patch
Hyperlink: http://www.securityfocus.com/archive/1/533163/100/0/threaded
Source: secalert@redhat.com
Resource: N/A
Hyperlink: http://www.securityfocus.com/bid/69286
Source: secalert@redhat.com
Resource: N/A
Hyperlink: http://www.securitytracker.com/id/1030739
Source: secalert@redhat.com
Resource: N/A
Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/95356
Source: secalert@redhat.com
Resource: N/A
Hyperlink: http://ofbiz.apache.org/download.html#vulnerabilities
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Patch
Vendor Advisory
Hyperlink: http://packetstormsecurity.com/files/127929/Apache-OFBiz-11.04.04-12.04.03-Cross-Site-Scripting.html
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://seclists.org/oss-sec/2014/q3/405
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://secunia.com/advisories/60807
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://svn.apache.org/viewvc?view=revision&revision=r1608698
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Patch
Hyperlink: http://www.securityfocus.com/archive/1/533163/100/0/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.securityfocus.com/bid/69286
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.securitytracker.com/id/1030739
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/95356
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Change History
0Changes found
Details not found