Unrated severityNVD Advisory· Published Aug 22, 2014· Updated Jun 17, 2026
CVE-2014-0232
CVE-2014-0232
Description
Multiple cross-site scripting (XSS) vulnerabilities in framework/common/webcommon/includes/messages.ftl in Apache OFBiz 11.04.01 before 11.04.05 and 12.04.01 before 12.04.04 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, which are not properly handled in a (1) result or (2) error message.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
8cpe:2.3:a:apache:ofbiz:11.04.01:*:*:*:*:*:*:*+ 7 more
- cpe:2.3:a:apache:ofbiz:11.04.01:*:*:*:*:*:*:*
- cpe:2.3:a:apache:ofbiz:11.04.02:*:*:*:*:*:*:*
- cpe:2.3:a:apache:ofbiz:11.04.03:*:*:*:*:*:*:*
- cpe:2.3:a:apache:ofbiz:11.04.04:*:*:*:*:*:*:*
- cpe:2.3:a:apache:ofbiz:12.04.01:*:*:*:*:*:*:*
- cpe:2.3:a:apache:ofbiz:12.04.02:*:*:*:*:*:*:*
- cpe:2.3:a:apache:ofbiz:12.04.03:*:*:*:*:*:*:*
- (no CPE)range: >= 11.04.01, < 11.04.05 || >= 12.04.01, < 12.04.04
Patches
Vulnerability mechanics
References
9- ofbiz.apache.org/download.htmlnvdPatchVendor Advisory
- svn.apache.org/viewvcnvdPatch
- packetstormsecurity.com/files/127929/Apache-OFBiz-11.04.04-12.04.03-Cross-Site-Scripting.htmlnvd
- seclists.org/oss-sec/2014/q3/405nvd
- secunia.com/advisories/60807nvd
- www.securityfocus.com/archive/1/533163/100/0/threadednvd
- www.securityfocus.com/bid/69286nvd
- www.securitytracker.com/id/1030739nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/95356nvd
News mentions
0No linked articles in our index yet.