Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2022-25371

Apache OFBiz uses the Birt project plugin (https://eclipse.github.io/birt-website/) to create data visualizations and reports. By leveraging a bug in Birt (https://bugs.eclipse.org/bugs/show_bug.cgi?id=538142) it is possible to perform a remote code execution (RCE) attack in Apache OFBiz, release 18.12.05 and earlier.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.019
EPSS Ranking 82.4%
CVSS Severity
CVSS v3 Score 9.8
Products affected by CVE-2022-25371
  • Apache » Ofbiz » Version: N/A
    cpe:2.3:a:apache:ofbiz:-
  • Apache » Ofbiz » Version: 09.04
    cpe:2.3:a:apache:ofbiz:09.04
  • Apache » Ofbiz » Version: 09.04.01
    cpe:2.3:a:apache:ofbiz:09.04.01
  • Apache » Ofbiz » Version: 10.04
    cpe:2.3:a:apache:ofbiz:10.04
  • Apache » Ofbiz » Version: 10.04.01
    cpe:2.3:a:apache:ofbiz:10.04.01
  • Apache » Ofbiz » Version: 10.04.02
    cpe:2.3:a:apache:ofbiz:10.04.02
  • Apache » Ofbiz » Version: 10.04.03
    cpe:2.3:a:apache:ofbiz:10.04.03
  • Apache » Ofbiz » Version: 10.04.04
    cpe:2.3:a:apache:ofbiz:10.04.04
  • Apache » Ofbiz » Version: 10.04.05
    cpe:2.3:a:apache:ofbiz:10.04.05
  • Apache » Ofbiz » Version: 10.04.06
    cpe:2.3:a:apache:ofbiz:10.04.06
  • Apache » Ofbiz » Version: 11.04
    cpe:2.3:a:apache:ofbiz:11.04
  • Apache » Ofbiz » Version: 11.04.01
    cpe:2.3:a:apache:ofbiz:11.04.01
  • Apache » Ofbiz » Version: 11.04.02
    cpe:2.3:a:apache:ofbiz:11.04.02
  • Apache » Ofbiz » Version: 11.04.03
    cpe:2.3:a:apache:ofbiz:11.04.03
  • Apache » Ofbiz » Version: 11.04.04
    cpe:2.3:a:apache:ofbiz:11.04.04
  • Apache » Ofbiz » Version: 11.04.05
    cpe:2.3:a:apache:ofbiz:11.04.05
  • Apache » Ofbiz » Version: 11.04.06
    cpe:2.3:a:apache:ofbiz:11.04.06
  • Apache » Ofbiz » Version: 12.04
    cpe:2.3:a:apache:ofbiz:12.04
  • Apache » Ofbiz » Version: 12.04.01
    cpe:2.3:a:apache:ofbiz:12.04.01
  • Apache » Ofbiz » Version: 12.04.02
    cpe:2.3:a:apache:ofbiz:12.04.02
  • Apache » Ofbiz » Version: 12.04.03
    cpe:2.3:a:apache:ofbiz:12.04.03
  • Apache » Ofbiz » Version: 12.04.04
    cpe:2.3:a:apache:ofbiz:12.04.04
  • Apache » Ofbiz » Version: 12.04.05
    cpe:2.3:a:apache:ofbiz:12.04.05
  • Apache » Ofbiz » Version: 12.04.06
    cpe:2.3:a:apache:ofbiz:12.04.06
  • Apache » Ofbiz » Version: 13.07
    cpe:2.3:a:apache:ofbiz:13.07
  • Apache » Ofbiz » Version: 13.07.01
    cpe:2.3:a:apache:ofbiz:13.07.01
  • Apache » Ofbiz » Version: 13.07.02
    cpe:2.3:a:apache:ofbiz:13.07.02
  • Apache » Ofbiz » Version: 13.07.03
    cpe:2.3:a:apache:ofbiz:13.07.03
  • Apache » Ofbiz » Version: 16.11.01
    cpe:2.3:a:apache:ofbiz:16.11.01
  • Apache » Ofbiz » Version: 16.11.02
    cpe:2.3:a:apache:ofbiz:16.11.02
  • Apache » Ofbiz » Version: 16.11.03
    cpe:2.3:a:apache:ofbiz:16.11.03
  • Apache » Ofbiz » Version: 16.11.04
    cpe:2.3:a:apache:ofbiz:16.11.04
  • Apache » Ofbiz » Version: 16.11.05
    cpe:2.3:a:apache:ofbiz:16.11.05
  • Apache » Ofbiz » Version: 16.11.06
    cpe:2.3:a:apache:ofbiz:16.11.06
  • Apache » Ofbiz » Version: 16.11.07
    cpe:2.3:a:apache:ofbiz:16.11.07
  • Apache » Ofbiz » Version: 17.12.01
    cpe:2.3:a:apache:ofbiz:17.12.01
  • Apache » Ofbiz » Version: 17.12.03
    cpe:2.3:a:apache:ofbiz:17.12.03
  • Apache » Ofbiz » Version: 17.12.04
    cpe:2.3:a:apache:ofbiz:17.12.04
  • Apache » Ofbiz » Version: 17.12.05
    cpe:2.3:a:apache:ofbiz:17.12.05
  • Apache » Ofbiz » Version: 17.12.06
    cpe:2.3:a:apache:ofbiz:17.12.06
  • Apache » Ofbiz » Version: 17.12.07
    cpe:2.3:a:apache:ofbiz:17.12.07
  • Apache » Ofbiz » Version: 17.12.08
    cpe:2.3:a:apache:ofbiz:17.12.08
  • Apache » Ofbiz » Version: 17.12.09
    cpe:2.3:a:apache:ofbiz:17.12.09
  • Apache » Ofbiz » Version: 18.12.01
    cpe:2.3:a:apache:ofbiz:18.12.01
  • Apache » Ofbiz » Version: 18.12.02
    cpe:2.3:a:apache:ofbiz:18.12.02
  • Apache » Ofbiz » Version: 18.12.03
    cpe:2.3:a:apache:ofbiz:18.12.03
  • Apache » Ofbiz » Version: 18.12.04
    cpe:2.3:a:apache:ofbiz:18.12.04
  • Apache » Ofbiz » Version: 18.12.05
    cpe:2.3:a:apache:ofbiz:18.12.05
  • Apache » Ofbiz » Version: 9.04
    cpe:2.3:a:apache:ofbiz:9.04
  • Apache » Ofbiz » Version: 9.04.01
    cpe:2.3:a:apache:ofbiz:9.04.01
  • Apache » Ofbiz » Version: 9.04.02
    cpe:2.3:a:apache:ofbiz:9.04.02


Products
Pricing
Contact Us

Shodan ® - All rights reserved