CVE-2007-2316
Estado: ModificadaAlta (10)—
Unspecified vulnerability in the admin script in Open Business Management (OBM) before 2.0.0 allows remote attackers to have an unknown impact by calling the script "in txt mode from a browser."
CVSS
- Versión: 2.0
- Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
- Puntuación base: 10
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 2.24%
- Percentil entre todas las CVEs puntuadas: 82
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- NVD-CWE-Other
Referencias
- http://obm.aliasource.org/changelogs/changelog-2.0.html
- http://osvdb.org/34899
- http://secunia.com/advisories/24775
- http://www.securityfocus.com/bid/23472
- http://www.vupen.com/english/advisories/2007/1376
- http://obm.aliasource.org/changelogs/changelog-2.0.html
- http://osvdb.org/34899
- http://secunia.com/advisories/24775
- http://www.securityfocus.com/bid/23472
- http://www.vupen.com/english/advisories/2007/1376
JSON original (NVD)
Mostrar
{
"id": "CVE-2007-2316",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 10,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"authentication": "NONE",
"integrityImpact": "COMPLETE",
"accessComplexity": "LOW",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": false,
"impactScore": 10,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2007-04-26T21:19:00.000",
"references": [
{
"url": "http://obm.aliasource.org/changelogs/changelog-2.0.html",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/34899",
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/24775",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/23472",
"source": "cve@mitre.org"
},
{
"url": "http://www.vupen.com/english/advisories/2007/1376",
"source": "cve@mitre.org"
},
{
"url": "http://obm.aliasource.org/changelogs/changelog-2.0.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/34899",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/24775",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/23472",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vupen.com/english/advisories/2007/1376",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Unspecified vulnerability in the admin script in Open Business Management (OBM) before 2.0.0 allows remote attackers to have an unknown impact by calling the script \"in txt mode from a browser.\""
},
{
"lang": "es",
"value": "Vulnerabilidad no especificada en el script de administración de Open Business Management (OBM) versiones anteriores a 2.0.0 permite a atacantes remotos tener un impacto desconocido al llamar al script \"en modo txt desde un navegador\"."
}
],
"lastModified": "2026-06-16T22:39:21.197",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:open_business_management:open_business_management:1.2.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E64BF9A0-318D-489E-BAB3-96ED8AEE4759"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}