Openbravo Openbravo Erp — known CVE vulnerabilities

Every CVE whose affected-product data names Openbravo Openbravo Erp, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2017-9437 — CVSS 8.8 (high): Openbravo Business Suite 3.0 is affected by SQL injection. This vulnerability could allow remote authenticated attackers to inject…
• CVE-2019-14362 — CVSS 5.4 (medium): Openbravo ERP before 3.0PR19Q1.3 is affected by Directory Traversal. This vulnerability could allow remote authenticated attackers to…
• CVE-2013-3617 — CVSS 3.5 (low): The XML API in Openbravo ERP 2.5, 3.0, and earlier allows remote authenticated users to read arbitrary files via an XML document with an…