apache ofbiz CVE-2020-1943 is a vulnerability in Apache OFBiz
Published on April 1, 2020

Data sent with contentId to /control/stream is not sanitized, allowing XSS attacks in Apache OFBiz 16.11.01 to 16.11.07.

NVD


Products Associated with CVE-2020-1943

Want to know whenever a new CVE is published for Apache OFBiz? stack.watch will email you.

Apache OFBiz
 

Affected Versions

Apache OFBiz Version 16.11.01 to 16.11.07 is affected by CVE-2020-1943

Exploit Probability

EPSS
84.00%
Percentile
99.28%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.