CVE-2019-14362
Published: Jul 28, 2019Modified: Jun 17, 2026
5.4
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Exploitability: 2.8 / Impact: 2.5
Source: NVD
5.5
Vector
AV:N/AC:L/Au:S/C:P/I:P/A:N
Exploitability: 8.0 / Impact: 4.9
Source: NVD
Description
Openbravo ERP before 3.0PR19Q1.3 is affected by Directory Traversal. This vulnerability could allow remote authenticated attackers to replace a file on the server via the getAttachmentDirectoryForNewAttachment inpKey value.
Affected (214)
Products: Openbravo: Openbravo Erp
1 product
1 product
Configuration A214 vulnerable
| Vulnerable Software | Affected Versions |
|---|---|
| Version 3.0 | |
| Version 3.0 maintenance_pack0.1 | |
| Version 3.0 maintenance_pack10.1 | |
| Version 3.0 maintenance_pack10.2 | |
| Version 3.0 maintenance_pack10.3 | |
| Version 3.0 maintenance_pack10 | |
| Version 3.0 maintenance_pack11.1 | |
| Version 3.0 maintenance_pack11 | |
| Version 3.0 maintenance_pack12.1 | |
| Version 3.0 maintenance_pack12.2 | |
| Version 3.0 maintenance_pack12 | |
| Version 3.0 maintenance_pack13.1 | |
| Version 3.0 maintenance_pack13.2 | |
| Version 3.0 maintenance_pack13 | |
| Version 3.0 maintenance_pack14.1 | |
| Version 3.0 maintenance_pack14.2 | |
| Version 3.0 maintenance_pack14 | |
| Version 3.0 maintenance_pack15.1 | |
| Version 3.0 maintenance_pack15.2 | |
| Version 3.0 maintenance_pack15 | |
| Version 3.0 maintenance_pack16.1 | |
| Version 3.0 maintenance_pack16.2 | |
| Version 3.0 maintenance_pack16.3 | |
| Version 3.0 maintenance_pack16 | |
| Version 3.0 maintenance_pack17.1 | |
| Version 3.0 maintenance_pack17.2 | |
| Version 3.0 maintenance_pack17.3 | |
| Version 3.0 maintenance_pack17 | |
| Version 3.0 maintenance_pack18.1 | |
| Version 3.0 maintenance_pack18.2 | |
| Version 3.0 maintenance_pack18.3 | |
| Version 3.0 maintenance_pack18.4 | |
| Version 3.0 maintenance_pack18.5 | |
| Version 3.0 maintenance_pack18 | |
| Version 3.0 maintenance_pack19.1 | |
| Version 3.0 maintenance_pack19.2 | |
| Version 3.0 maintenance_pack19.3 | |
| Version 3.0 maintenance_pack19.4 | |
| Version 3.0 maintenance_pack19 | |
| Version 3.0 maintenance_pack1 | |
| Version 3.0 maintenance_pack2.1 | |
| Version 3.0 maintenance_pack2.2 | |
| Version 3.0 maintenance_pack2.3 | |
| Version 3.0 maintenance_pack2.4 | |
| Version 3.0 maintenance_pack20 | |
| Version 3.0 maintenance_pack21.1 | |
| Version 3.0 maintenance_pack21 | |
| Version 3.0 maintenance_pack22.1 | |
| Version 3.0 maintenance_pack22.2 | |
| Version 3.0 maintenance_pack22.3 | |
| Version 3.0 maintenance_pack22 | |
| Version 3.0 maintenance_pack23.1 | |
| Version 3.0 maintenance_pack23.2 | |
| Version 3.0 maintenance_pack23 | |
| Version 3.0 maintenance_pack24.1 | |
| Version 3.0 maintenance_pack24.2 | |
| Version 3.0 maintenance_pack24 | |
| Version 3.0 maintenance_pack25.1 | |
| Version 3.0 maintenance_pack25.2 | |
| Version 3.0 maintenance_pack25 | |
| Version 3.0 maintenance_pack26.1 | |
| Version 3.0 maintenance_pack26.2 | |
| Version 3.0 maintenance_pack26.3 | |
| Version 3.0 maintenance_pack26.4 | |
| Version 3.0 maintenance_pack26 | |
| Version 3.0 maintenance_pack27.1 | |
| Version 3.0 maintenance_pack27 | |
| Version 3.0 maintenance_pack28.1 | |
| Version 3.0 maintenance_pack28.2 | |
| Version 3.0 maintenance_pack28.3 | |
| Version 3.0 maintenance_pack28.4 | |
| Version 3.0 maintenance_pack28.5 | |
| Version 3.0 maintenance_pack28 | |
| Version 3.0 maintenance_pack29.1 | |
| Version 3.0 maintenance_pack29.2 | |
| Version 3.0 maintenance_pack29.3 | |
| Version 3.0 maintenance_pack29.4 | |
| Version 3.0 maintenance_pack29 | |
| Version 3.0 maintenance_pack2 | |
| Version 3.0 maintenance_pack3.1 | |
| Version 3.0 maintenance_pack3.2 | |
| Version 3.0 maintenance_pack30.1 | |
| Version 3.0 maintenance_pack30.2 | |
| Version 3.0 maintenance_pack30.3 | |
| Version 3.0 maintenance_pack30 | |
| Version 3.0 maintenance_pack31.1 | |
| Version 3.0 maintenance_pack31.2 | |
| Version 3.0 maintenance_pack31.3 | |
| Version 3.0 maintenance_pack31.4 | |
| Version 3.0 maintenance_pack31 | |
| Version 3.0 maintenance_pack3 | |
| Version 3.0 maintenance_pack4.1 | |
| Version 3.0 maintenance_pack4.2 | |
| Version 3.0 maintenance_pack4 | |
| Version 3.0 maintenance_pack5.1 | |
| Version 3.0 maintenance_pack5.2 | |
| Version 3.0 maintenance_pack5.3 | |
| Version 3.0 maintenance_pack5 | |
| Version 3.0 maintenance_pack6.1 | |
| Version 3.0 maintenance_pack6.2 | |
| Version 3.0 maintenance_pack6 | |
| Version 3.0 maintenance_pack7.1 | |
| Version 3.0 maintenance_pack7.2 | |
| Version 3.0 maintenance_pack7.3 | |
| Version 3.0 maintenance_pack7 | |
| Version 3.0 maintenance_pack8.1 | |
| Version 3.0 maintenance_pack8.2 | |
| Version 3.0 maintenance_pack8.3 | |
| Version 3.0 maintenance_pack8.4 | |
| Version 3.0 maintenance_pack8 | |
| Version 3.0 maintenance_pack9.1 | |
| Version 3.0 maintenance_pack9.2 | |
| Version 3.0 maintenance_pack9.3 | |
| Version 3.0 maintenance_pack9 | |
| Version 3.0 pr14q2.1 | |
| Version 3.0 pr14q2.2 | |
| Version 3.0 pr14q2.3 | |
| Version 3.0 pr14q2.4 | |
| Version 3.0 pr14q2.5 | |
| Version 3.0 pr14q2.6 | |
| Version 3.0 pr14q2 | |
| Version 3.0 pr14q3.1 | |
| Version 3.0 pr14q3.2 | |
| Version 3.0 pr14q3.3 | |
| Version 3.0 pr14q3.4 | |
| Version 3.0 pr14q3.5 | |
| Version 3.0 pr14q3.6 | |
| Version 3.0 pr14q3.7 | |
| Version 3.0 pr14q3.8 | |
| Version 3.0 pr14q3 | |
| Version 3.0 pr14q4 | |
| Version 3.0 pr15q1.1 | |
| Version 3.0 pr15q1.2 | |
| Version 3.0 pr15q1.3 | |
| Version 3.0 pr15q1.4 | |
| Version 3.0 pr15q1.5 | |
| Version 3.0 pr15q1 | |
| Version 3.0 pr15q2.1 | |
| Version 3.0 pr15q2.2 | |
| Version 3.0 pr15q2.3 | |
| Version 3.0 pr15q2.4 | |
| Version 3.0 pr15q2.5 | |
| Version 3.0 pr15q2.6 | |
| Version 3.0 pr15q2 | |
| Version 3.0 pr15q3.1 | |
| Version 3.0 pr15q3.2 | |
| Version 3.0 pr15q3.3 | |
| Version 3.0 pr15q3.4 | |
| Version 3.0 pr15q3.5 | |
| Version 3.0 pr15q3 | |
| Version 3.0 pr15q4.1 | |
| Version 3.0 pr15q4.2 | |
| Version 3.0 pr15q4.3 | |
| Version 3.0 pr15q4.4 | |
| Version 3.0 pr15q4.5 | |
| Version 3.0 pr15q4.6 | |
| Version 3.0 pr15q4 | |
| Version 3.0 pr16q1.1 | |
| Version 3.0 pr16q1.2 | |
| Version 3.0 pr16q1.3 | |
| Version 3.0 pr16q1 | |
| Version 3.0 pr16q2.1 | |
| Version 3.0 pr16q2.2 | |
| Version 3.0 pr16q2.3 | |
| Version 3.0 pr16q2.4 | |
| Version 3.0 pr16q2 | |
| Version 3.0 pr16q3.1 | |
| Version 3.0 pr16q3.2 | |
| Version 3.0 pr16q3.3 | |
| Version 3.0 pr16q3.4 | |
| Version 3.0 pr16q3.5 | |
| Version 3.0 pr16q3 | |
| Version 3.0 pr16q4.1 | |
| Version 3.0 pr16q4.2 | |
| Version 3.0 pr16q4.3 | |
| Version 3.0 pr16q4.4 | |
| Version 3.0 pr16q4 | |
| Version 3.0 pr17q1.1 | |
| Version 3.0 pr17q1.2 | |
| Version 3.0 pr17q1.3 | |
| Version 3.0 pr17q1 | |
| Version 3.0 pr17q2.1 | |
| Version 3.0 pr17q2.2 | |
| Version 3.0 pr17q2.3 | |
| Version 3.0 pr17q2.4 | |
| Version 3.0 pr17q2 | |
| Version 3.0 pr17q3.1 | |
| Version 3.0 pr17q3.2 | |
| Version 3.0 pr17q3.3 | |
| Version 3.0 pr17q3 | |
| Version 3.0 pr17q4.1 | |
| Version 3.0 pr17q4.2 | |
| Version 3.0 pr17q4 | |
| Version 3.0 pr18q1.1 | |
| Version 3.0 pr18q1.2 | |
| Version 3.0 pr18q1.3 | |
| Version 3.0 pr18q1 | |
| Version 3.0 pr18q2.1 | |
| Version 3.0 pr18q2.2 | |
| Version 3.0 pr18q2.3 | |
| Version 3.0 pr18q2 | |
| Version 3.0 pr18q3.1 | |
| Version 3.0 pr18q3.2 | |
| Version 3.0 pr18q3.3 | |
| Version 3.0 pr18q3.4 | |
| Version 3.0 pr18q3.5 | |
| Version 3.0 pr18q3 | |
| Version 3.0 pr18q4.1 | |
| Version 3.0 pr18q4.2 | |
| Version 3.0 pr18q4.3 | |
| Version 3.0 pr18q4 | |
| Version 3.0 pr19q1.1 | |
| Version 3.0 pr19q1.2 | |
| Version 3.0 pr19q1 |
References (6)
Source: cve@mitre.org
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitPatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory
Timeline
No history available yet.