Unscored severity · published Oct 25, 2012
CVE-2012-3506
Unspecified vulnerability in the Apache Open For Business Project (aka OFBiz) 10.04.x before 10.04.03 has unknown impact and attack vectors
–
CVSS
7.5%
EPSS
No
On KEV
Description
Unspecified vulnerability in the Apache Open For Business Project (aka OFBiz) 10.04.x before 10.04.03 has unknown impact and attack vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)7.5% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OF
OFBiz · Apache
10.04.01; 10.04.02 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-3506
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-3506
Patch
http://ofbiz.apache.org/download.html#vulnerabilities
Broken Link
http://osvdb.org/86556
Mailing List
http://seclists.org/fulldisclosure/2012/Oct/156
Third Party Advisory
http://www.securityfocus.com/bid/56171
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/79540
More from OFBiz
9.8
CVE-2024-38856
Apache OFBiz: Unauthenticated endpoint could allow execution of screen rendering code
9.8
CVE-2024-32113
Apache OFBiz: Path traversal leading to RCE
7.5
CVE-2024-45195
Apache OFBiz: Confused controller-view authorization logic (forced browsing)
9.8
CVE-2026-45434
Apache OFBiz: Authentication Bypass via Password-Change Logic Flaw Leading to RCE
9.8
CVE-2025-54466
Improper Control of Generation of Code ('Code Injection') vulnerability leading to a possible RCE in Apache OFBiz scrum plugin