« Volver al listado

CVE-2013-2250

Estado: ModificadaAlta (10)—

Apache Open For Business Project (aka OFBiz) 10.04.01 through 10.04.05, 11.04.01 through 11.04.02, and 12.04.01 allows remote attackers to execute arbitrary Unified Expression Language (UEL) functions via JUEL metacharacters in unspecified parameters, related to nested expressions.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Apache — Ofbiz

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-2250",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "secalert@redhat.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-08-15T16:55:09.437",
  "references": [
    {
      "url": "http://archives.neohapsis.com/archives/bugtraq/2013-07/0143.html",
      "tags": [
        "Broken Link"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://ofbiz.apache.org/download.html#vulnerabilities",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://osvdb.org/95522",
      "tags": [
        "Broken Link"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://secunia.com/advisories/53910",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/61369",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/85875",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://archives.neohapsis.com/archives/bugtraq/2013-07/0143.html",
      "tags": [
        "Broken Link"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://ofbiz.apache.org/download.html#vulnerabilities",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/95522",
      "tags": [
        "Broken Link"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/53910",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/61369",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/85875",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Apache Open For Business Project (aka OFBiz) 10.04.01 through 10.04.05, 11.04.01 through 11.04.02, and 12.04.01 allows remote attackers to execute arbitrary Unified Expression Language (UEL) functions via JUEL metacharacters in unspecified parameters, related to nested expressions."
    },
    {
      "lang": "es",
      "value": "Apache Open For Business Project (también conocido como OFBiz) v10.04.01 hasta v10.04.05, v11.04.01 hasta v11.04.02, y v12.04.01 permite a atacantes remotos ejecutar funciones arbitrarias Unified Expression Language (UEL) a través de meta caracteres JUEL en parámetros no especificados, relacionado con expresiones anidadas."
    }
  ],
  "lastModified": "2026-06-16T23:53:01.413",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:apache:ofbiz:10.04.01:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E9FBA6A6-D7B1-4870-B18B-60E9B5EBA5C9"
            },
            {
              "criteria": "cpe:2.3:a:apache:ofbiz:10.04.02:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C4571E42-8128-4FA4-8350-F3EB1F96853E"
            },
            {
              "criteria": "cpe:2.3:a:apache:ofbiz:10.04.03:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2A54B914-1A1E-4F3C-AACA-AFCED4023A76"
            },
            {
              "criteria": "cpe:2.3:a:apache:ofbiz:10.04.04:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BE538AFD-DFD8-4BE0-8E97-ED0D80E4FCF0"
            },
            {
              "criteria": "cpe:2.3:a:apache:ofbiz:10.04.05:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E4989B04-155A-473D-84C8-05A7AEB30798"
            },
            {
              "criteria": "cpe:2.3:a:apache:ofbiz:11.04.01:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4BC9FE7F-EAAB-42DC-B0B0-81B484C06571"
            },
            {
              "criteria": "cpe:2.3:a:apache:ofbiz:11.04.02:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "770795DB-628C-4C60-B89A-81054048A56C"
            },
            {
              "criteria": "cpe:2.3:a:apache:ofbiz:12.04.01:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7A557337-D8FD-47F4-9E66-9A642B834E7D"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secalert@redhat.com"
}