Back to CVE Browser

CVE-2012-3506

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0340%

EPSS Percentile29.40th

PublishedOct 25, 2012

Last ModifiedApr 29, 2026

Vulnerability Description

Unspecified vulnerability in the Apache Open For Business Project (aka OFBiz) 10.04.x before 10.04.03 has unknown impact and attack vectors.

Affected Platforms (CPE)

📦

Apache

Ofbiz

= 10.04.01

📦

Apache

Ofbiz

= 10.04.02

References & Advisories

🔗 http://ofbiz.apache.org/download.html#vulnerabilities

🔗 http://osvdb.org/86556

🔗 http://seclists.org/fulldisclosure/2012/Oct/156

🔗 http://www.securityfocus.com/bid/56171

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/79540

🔗 http://ofbiz.apache.org/download.html#vulnerabilities

🔗 http://osvdb.org/86556

🔗 http://seclists.org/fulldisclosure/2012/Oct/156

Related Vulnerabilities

CVE-2013-225010.0

Apache Open For Business Project (aka OFBiz) 10.04.01 through 10.04.05, 11.04.01 through 11.04.02, and 12.04.01 allows remote atta...

CVE-2018-172009.8

The Apache OFBiz HTTP engine (org.apache.ofbiz.service.engine.HttpEngine.java) handles requests for HTTP services via the /webtool...

CVE-2019-100749.8

An RCE is possible by entering Freemarker markup in an Apache OFBiz Form Widget textarea field when encoding has been disabled on ...

CVE-2019-01899.8

The java.io.ObjectInputStream is known to cause Java serialisation issues. This issue here is exposed by the "webtools/control/htt...