NVD

Id
38337  
Name
CVE-2013-2250  
Description
Apache Open For Business Project (aka OFBiz) 10.04.01 through 10.04.05, 11.04.01 through 11.04.02, and 12.04.01 allows remote attackers to execute arbitrary Unified Expression Language (UEL) functions via JUEL metacharacters in unspecified parameters, related to nested expressions.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-08-15  
Modified Date
2013-08-19  
Seq
2013-2250  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
196060 38337 CVE-2013-2250 20130720 [CVE-2013-2250] Apache OFBiz Nested expression evaluation allows remote users to execute arbitrary UEL functions in OFBiz  View
196061 38337 CVE-2013-2250 http://ofbiz.apache.org/download.html#vulnerabilities  View
196062 38337 CVE-2013-2250 61369  View
196063 38337 CVE-2013-2250 apache-ofbiz-cve20132250-code-exec(85875)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
22171 JVNDB-2013-003746 Apache Open For Business Project における任意の Unified Expression Language 機能を実行される脆弱性 Apache Open For Business Project (別名 OFBiz) には、ネストされた式に関する処理に不備があるため、任意の Unified Expression Language (UEL) 機能を実行される脆弱性が存在します。 CVE-2013-2250 62192 CVE-2013-2250 38337 10 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003746.html 2013-07-20 2013-08-16 View