CVE-2012-3506

critical
Published 2012-10-25 · Modified 2026-04-29
CVSS v3
CVSS v2
10.0
VIR risk
10.0

Description

Unspecified vulnerability in the Apache Open For Business Project (aka OFBiz) 10.04.x before 10.04.03 has unknown impact and attack vectors.

Predictions

Exploit likelihood
20%
Patch ETA

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: secalert@redhat.com — http://ofbiz.apache.org/download.html#vulnerabilities

Application impact

VendorProductVersionsFixed
apache apacheofbiz10.04.01
apache apacheofbiz10.04.02

References

Verify integrity in audit chain (admin only). AS-IS.