{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "Openbravo ERP before 3.0PR19Q1.3 is affected by Directory Traversal. This vulnerability could allow remote authenticated attackers to replace a file on the server via the getAttachmentDirectoryForNewAttachment inpKey value."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2019-07-28T17:26:06", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://www.sitincloud.com/securite/directory-traversal-openbravo-erp/"}, {"tags": ["x_refsource_MISC"], "url": "https://grep.blog/directory-traversal-openbravo/"}, {"tags": ["x_refsource_MISC"], "url": "https://issues.openbravo.com/view.php?id=41413"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2019-14362", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Openbravo ERP before 3.0PR19Q1.3 is affected by Directory Traversal. This vulnerability could allow remote authenticated attackers to replace a file on the server via the getAttachmentDirectoryForNewAttachment inpKey value."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://www.sitincloud.com/securite/directory-traversal-openbravo-erp/", "refsource": "MISC", "url": "https://www.sitincloud.com/securite/directory-traversal-openbravo-erp/"}, {"name": "https://grep.blog/directory-traversal-openbravo/", "refsource": "MISC", "url": "https://grep.blog/directory-traversal-openbravo/"}, {"name": "https://issues.openbravo.com/view.php?id=41413", "refsource": "MISC", "url": "https://issues.openbravo.com/view.php?id=41413"}]}}}}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2019-14362", "datePublished": "2019-07-28T17:26:06", "dateReserved": "2019-07-28T00:00:00", "dateUpdated": "2019-07-28T17:26:06", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:-:*:*:*:*:*:*", "matchCriteriaId": "7BB25161-9D16-4333-BE35-FAB1F0668831", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack0.1:*:*:*:*:*:*", "matchCriteriaId": "A5B59DBC-2FE6-456D-8397-8F850DD3D273", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack1:*:*:*:*:*:*", "matchCriteriaId": "62634E19-5401-4318-A72D-D4599B3967B8", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack10:*:*:*:*:*:*", "matchCriteriaId": "39D2B604-B466-439D-9BCB-80E9B93A83DF", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack10.1:*:*:*:*:*:*", "matchCriteriaId": "B6AA745E-DAB5-4647-A2A6-61E37E60AB88", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack10.2:*:*:*:*:*:*", "matchCriteriaId": "AE6FED44-CF81-4289-8F42-7295066C7952", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack10.3:*:*:*:*:*:*", "matchCriteriaId": "4FC9EAB5-7497-4C94-A198-9DDC36AF2354", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack11:*:*:*:*:*:*", "matchCriteriaId": "7F987158-0A41-4911-BF12-9195D287FDA4", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack11.1:*:*:*:*:*:*", "matchCriteriaId": "FB526293-2A1C-4395-BBB0-CB464C57F650", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack12:*:*:*:*:*:*", "matchCriteriaId": "638FE4BA-09F2-48ED-91DE-64503E6974D8", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack12.1:*:*:*:*:*:*", "matchCriteriaId": "1796942E-84EF-4BE5-88EE-818BF3175A94", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack12.2:*:*:*:*:*:*", "matchCriteriaId": "1B1CD2BF-25F7-4130-8479-95C6FAC8F63A", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack13:*:*:*:*:*:*", "matchCriteriaId": "2D4B8D80-3A31-4606-BA07-BD6F9DFBA636", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack13.1:*:*:*:*:*:*", "matchCriteriaId": "2F2C8D62-2C83-43E4-8096-E0493D9E50B6", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack13.2:*:*:*:*:*:*", "matchCriteriaId": "D2533D53-17A6-4CA1-8C6F-406B098018E3", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack14:*:*:*:*:*:*", "matchCriteriaId": "863FC80F-4323-42F4-A5D6-D830A1755D7E", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack14.1:*:*:*:*:*:*", "matchCriteriaId": "35F28A58-4F51-4BFE-A538-0383E98131A7", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack14.2:*:*:*:*:*:*", "matchCriteriaId": "124F70B7-162A-47E8-A613-903D26347AA9", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack15:*:*:*:*:*:*", "matchCriteriaId": "770D266C-247A-4D98-A905-8054E11E20B5", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack15.1:*:*:*:*:*:*", "matchCriteriaId": "6B620CD5-C542-43C2-ADB0-C2FD14F8009F", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack15.2:*:*:*:*:*:*", "matchCriteriaId": "268B5413-0383-4ADC-AE98-134EADE8B7D6", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack16:*:*:*:*:*:*", "matchCriteriaId": "63167EFD-9D2E-4BC9-B593-5147D22F1D01", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack16.1:*:*:*:*:*:*", "matchCriteriaId": "7CC7D8E0-E25A-45DB-B71B-DCD4DBC02D43", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack16.2:*:*:*:*:*:*", "matchCriteriaId": "3DAFDF0F-8F67-4961-AF90-D1DC40A07E62", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack16.3:*:*:*:*:*:*", "matchCriteriaId": "BB113340-EA10-43A5-918A-6819150D2717", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack17:*:*:*:*:*:*", "matchCriteriaId": "A9D6CD27-773E-4A89-A368-0846B238DA3A", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack17.1:*:*:*:*:*:*", "matchCriteriaId": "B018E732-E70C-4EDC-A1E2-ABD8E6DAFBA2", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack17.2:*:*:*:*:*:*", "matchCriteriaId": "BD111512-6962-4391-B0B0-6A75E0BF65E4", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack17.3:*:*:*:*:*:*", "matchCriteriaId": "73810F20-9889-4309-9539-A8B5CB3DBAA2", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack18:*:*:*:*:*:*", "matchCriteriaId": "F9C023C5-6A26-4193-A993-0E8785D69858", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack18.1:*:*:*:*:*:*", "matchCriteriaId": "DF4F3DF4-7625-4012-93BF-1127347ABEF0", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack18.2:*:*:*:*:*:*", "matchCriteriaId": "9E29E5E3-BB07-476D-8B4E-27FB2A6760EF", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack18.3:*:*:*:*:*:*", "matchCriteriaId": "93BB3BBF-7F7B-4A6E-A024-EF859C1E3DBB", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack18.4:*:*:*:*:*:*", "matchCriteriaId": "4BB6B84E-9184-4B8C-8936-6B0B876A436F", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack18.5:*:*:*:*:*:*", "matchCriteriaId": "DD3D514D-C705-4EC1-8A18-C36FD72E65D1", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack19:*:*:*:*:*:*", "matchCriteriaId": "AA55C1C9-43C0-4545-8AC3-94CA9F626D4B", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack19.1:*:*:*:*:*:*", "matchCriteriaId": "CC3FEBE2-C9C8-4DEB-B5FD-1941BEE00435", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack19.2:*:*:*:*:*:*", "matchCriteriaId": "812BB0A9-9A25-4908-9113-AC70372514AE", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack19.3:*:*:*:*:*:*", "matchCriteriaId": "BFCC03E1-9702-4667-829E-A9B47D3D5481", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack19.4:*:*:*:*:*:*", "matchCriteriaId": "3B3C35FC-68E7-436E-B170-A1F894F745AC", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack2:*:*:*:*:*:*", "matchCriteriaId": "254036B1-D251-4130-B7AF-124262DEAEC4", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack2.1:*:*:*:*:*:*", "matchCriteriaId": "7EB41A47-2C80-4925-90A2-18C1284ACA01", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack2.2:*:*:*:*:*:*", "matchCriteriaId": "3DE5ED64-FA2B-4807-BCD6-BF755100AC99", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack2.3:*:*:*:*:*:*", "matchCriteriaId": "DD10878B-5C2E-47CB-9781-F760DC3AC9F7", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack2.4:*:*:*:*:*:*", "matchCriteriaId": "2F993503-14BA-43F1-B2C5-0ACD34B8643F", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack20:*:*:*:*:*:*", "matchCriteriaId": "F1A3BABD-E9B0-4970-8694-660E2A12815F", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack21:*:*:*:*:*:*", "matchCriteriaId": "6E5452A7-34D7-4891-956F-DAD6256F476C", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack21.1:*:*:*:*:*:*", "matchCriteriaId": "F70183CB-6422-4B9C-9286-C2F8CE064849", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack22:*:*:*:*:*:*", "matchCriteriaId": "64A973B6-14C8-4E64-A328-1719483E737A", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack22.1:*:*:*:*:*:*", "matchCriteriaId": "AE643E53-44C3-4347-A4FF-590DEABDF629", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack22.2:*:*:*:*:*:*", "matchCriteriaId": "5F320A27-411B-44D4-8710-EDC3EDAA025A", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack22.3:*:*:*:*:*:*", "matchCriteriaId": "5E508A65-CDE7-425F-980B-3D452981776D", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack23:*:*:*:*:*:*", "matchCriteriaId": "1363F86F-8539-48A1-9574-85D4E8BD4762", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack23.1:*:*:*:*:*:*", "matchCriteriaId": "AE68FF6A-EC45-45FE-BD1B-32CF0342691B", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack23.2:*:*:*:*:*:*", "matchCriteriaId": "71DBC741-DA9D-42BC-9D84-6CCA01A6CE0A", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack24:*:*:*:*:*:*", "matchCriteriaId": "B0A0AB36-D65C-47C9-91E4-FF556D90CEE2", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack24.1:*:*:*:*:*:*", "matchCriteriaId": "D220EBD7-F241-40C2-B432-672A0FF46EE5", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack24.2:*:*:*:*:*:*", "matchCriteriaId": "984409B1-6AD8-4266-9F35-28FBC20B62BE", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack25:*:*:*:*:*:*", "matchCriteriaId": "B9345B03-4AFF-4F29-BED7-78807ED3BFC3", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack25.1:*:*:*:*:*:*", "matchCriteriaId": "06AD249C-D285-42F9-8A19-8D6D59AB706A", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack25.2:*:*:*:*:*:*", "matchCriteriaId": "69DAF672-8206-437D-95BF-B1F872548321", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack26:*:*:*:*:*:*", "matchCriteriaId": "0F7206C4-7FA6-406C-8A69-EB5256320559", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack26.1:*:*:*:*:*:*", "matchCriteriaId": "3DCE3F4E-145D-466F-9793-9E0DE62B8F31", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack26.2:*:*:*:*:*:*", "matchCriteriaId": "9A2B4B64-9DB0-41B9-B3F2-AC497EC2BDE2", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack26.3:*:*:*:*:*:*", "matchCriteriaId": "42A9E676-7685-41B1-9310-8C74D7276627", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack26.4:*:*:*:*:*:*", "matchCriteriaId": "9A0436F4-A475-4553-888E-D6DF687EE507", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack27:*:*:*:*:*:*", "matchCriteriaId": "E987CDC5-AF53-45D9-88CB-7D37795268AA", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack27.1:*:*:*:*:*:*", "matchCriteriaId": "E10C0EE5-8EB2-4F31-9808-58798CE54A5D", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack28:*:*:*:*:*:*", "matchCriteriaId": "1F72DD2B-C35E-495A-9DED-4F354FF141D1", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack28.1:*:*:*:*:*:*", "matchCriteriaId": "10627A7F-DE17-4AD0-8D5A-091869B996F6", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack28.2:*:*:*:*:*:*", "matchCriteriaId": "BAE323B3-19A5-4698-84FA-4F1BF708F3C2", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack28.3:*:*:*:*:*:*", "matchCriteriaId": "7F6B1B69-FA2B-432D-BEEB-10C75BE605C7", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack28.4:*:*:*:*:*:*", "matchCriteriaId": "DA58B1CA-8DAE-458C-8E1A-46D5C9B82EB4", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack28.5:*:*:*:*:*:*", "matchCriteriaId": "875A1769-D485-456C-9AC8-580BD6F10ECA", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack29:*:*:*:*:*:*", "matchCriteriaId": "14DDF305-D7B6-46BF-8FFE-9493C8DF4787", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack29.1:*:*:*:*:*:*", "matchCriteriaId": "17BC3F96-875A-4F7D-A896-EBDC18C5F43F", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack29.2:*:*:*:*:*:*", "matchCriteriaId": "AAE00747-839A-4C11-A2BF-DCE44CC5DF52", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack29.3:*:*:*:*:*:*", "matchCriteriaId": "5B0A787C-263D-4FA5-9EDA-C9FC350A2265", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack29.4:*:*:*:*:*:*", "matchCriteriaId": "14D03020-D8F5-489B-B686-E3FF75DEDA97", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack3:*:*:*:*:*:*", "matchCriteriaId": "54C073F6-9E93-4626-9048-5867A4B0789B", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack3.1:*:*:*:*:*:*", "matchCriteriaId": "F3AB254F-839E-4F4B-B2F1-005BC0BCFD55", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack3.2:*:*:*:*:*:*", "matchCriteriaId": "29DB00DE-AE47-471B-8566-5D96B077C7FC", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack30:*:*:*:*:*:*", "matchCriteriaId": "2B1CC2C5-0625-4798-AEBF-622C8DD1AC28", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack30.1:*:*:*:*:*:*", "matchCriteriaId": "BCCBBFBF-5DE1-4E86-95F5-C331DBB1FFA1", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack30.2:*:*:*:*:*:*", "matchCriteriaId": "B5D4583B-385F-43E8-9AA8-894633566FE0", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack30.3:*:*:*:*:*:*", "matchCriteriaId": "B51039B4-5C8A-4B7F-BEC4-7F1B9979DA2F", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack31:*:*:*:*:*:*", "matchCriteriaId": "20F3CDE4-7D38-4FEB-83E9-442D1BB6F68E", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack31.1:*:*:*:*:*:*", "matchCriteriaId": "44700948-9FDB-4B39-B2AF-5E16B089B9F2", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack31.2:*:*:*:*:*:*", "matchCriteriaId": "650CD0D0-5D10-4FF4-94A2-43FC402237B5", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack31.3:*:*:*:*:*:*", "matchCriteriaId": "FDD53D77-6C54-4C8A-8ABA-597D84EFD748", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack31.4:*:*:*:*:*:*", "matchCriteriaId": "2BD37C10-F62E-40BF-81FC-B6D26DD6FCC6", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack4:*:*:*:*:*:*", "matchCriteriaId": "A98560C8-57CF-43F9-9494-5AD2A9267356", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack4.1:*:*:*:*:*:*", "matchCriteriaId": "C5F0D857-9A4E-4111-941F-0C02EDD4F042", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack4.2:*:*:*:*:*:*", "matchCriteriaId": "A2B7F7C7-7D72-47F0-99F6-26DFD883E678", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack5:*:*:*:*:*:*", "matchCriteriaId": "CC3B09C9-2CB7-44AA-85C3-63DB90BD4B96", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack5.1:*:*:*:*:*:*", "matchCriteriaId": "56E48FB7-69DC-40E0-877C-DE9DF1680E2E", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack5.2:*:*:*:*:*:*", "matchCriteriaId": "D04A9232-7A79-4352-96EF-1C67409697BF", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack5.3:*:*:*:*:*:*", "matchCriteriaId": "31DAACC9-75E9-4AC1-AE7D-6DB444D60391", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack6:*:*:*:*:*:*", "matchCriteriaId": "D9323AC6-2884-4C00-9025-6F2B4D0EB657", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack6.1:*:*:*:*:*:*", "matchCriteriaId": "E4AA3F40-7303-4D43-9E46-6DB3C4063630", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack6.2:*:*:*:*:*:*", "matchCriteriaId": "482573A8-0594-4593-A923-9B7721DB1296", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack7:*:*:*:*:*:*", "matchCriteriaId": "50264D77-157C-418F-A5FD-E989E3D8B40B", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack7.1:*:*:*:*:*:*", "matchCriteriaId": "D856BFBC-19CE-4C52-834A-99FC1BB897DB", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack7.2:*:*:*:*:*:*", "matchCriteriaId": "3D3A33E7-80DF-411D-AAB2-283AE6265499", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack7.3:*:*:*:*:*:*", "matchCriteriaId": "68394B59-CC88-41D4-A77B-02F4FF0DC0F8", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack8:*:*:*:*:*:*", "matchCriteriaId": "584D4C2F-81EA-4184-86ED-D8ACF75F8A6E", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack8.1:*:*:*:*:*:*", "matchCriteriaId": "F4613C95-2677-4287-9635-E0EA24788C20", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack8.2:*:*:*:*:*:*", "matchCriteriaId": "86BE2EB8-C664-4EC3-B8C6-5F8AA16E88CA", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack8.3:*:*:*:*:*:*", "matchCriteriaId": "6763297B-AA5F-44B8-BE2A-5AD8D3FFABF2", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack8.4:*:*:*:*:*:*", "matchCriteriaId": "F0FF1B3E-5D02-4795-AC43-37632E9F4E9E", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack9:*:*:*:*:*:*", "matchCriteriaId": "FCF0DC27-47DB-4903-9809-7BB822BD081F", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack9.1:*:*:*:*:*:*", "matchCriteriaId": "33395A99-CB65-45B5-AD35-83812DEE8794", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack9.2:*:*:*:*:*:*", "matchCriteriaId": "68BAF583-6EB9-4B89-8E1A-C001A9AE788A", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:maintenance_pack9.3:*:*:*:*:*:*", "matchCriteriaId": "98B194F9-906C-49E2-83C5-5FC9BD772C55", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr14q2:*:*:*:*:*:*", "matchCriteriaId": "D339C5F1-6A1F-4F82-A3D1-80B06F4E9D6F", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr14q2.1:*:*:*:*:*:*", "matchCriteriaId": "6033A732-3DA8-4983-9850-0A071B653BA6", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr14q2.2:*:*:*:*:*:*", "matchCriteriaId": "8125281D-D061-460C-99E8-1DF2DF568C9E", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr14q2.3:*:*:*:*:*:*", "matchCriteriaId": "0CF408DE-6405-42B6-A64F-A8AF7DF90276", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr14q2.4:*:*:*:*:*:*", "matchCriteriaId": "45A6C19C-3D43-48FD-8187-71BC529A2661", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr14q2.5:*:*:*:*:*:*", "matchCriteriaId": "DA68F367-2353-4B43-8AC2-1E208122F19B", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr14q2.6:*:*:*:*:*:*", "matchCriteriaId": "AB963611-F4D0-49C4-9ECC-2E00599D99D9", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr14q3:*:*:*:*:*:*", "matchCriteriaId": "E507282E-D10B-46B3-8F4D-928AB0E68558", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr14q3.1:*:*:*:*:*:*", "matchCriteriaId": "E684B641-180D-4F9F-8C1B-5841C51D4F1C", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr14q3.2:*:*:*:*:*:*", "matchCriteriaId": "3D3E3F83-09AC-4E4C-B869-F3DDF34C4150", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr14q3.3:*:*:*:*:*:*", "matchCriteriaId": "4427F824-D0DD-4920-AF85-908CF4039C23", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr14q3.4:*:*:*:*:*:*", "matchCriteriaId": "066A3A6B-AB7C-424C-B887-FF998F4B7AE6", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr14q3.5:*:*:*:*:*:*", "matchCriteriaId": "9EBCE36F-1BFD-4D88-A00D-19A4493781EF", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr14q3.6:*:*:*:*:*:*", "matchCriteriaId": "5DE10493-51A2-4DA0-B88A-9F76C93FD454", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr14q3.7:*:*:*:*:*:*", "matchCriteriaId": "11081323-0088-4520-BBE8-F333C90206F9", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr14q3.8:*:*:*:*:*:*", "matchCriteriaId": "9054465F-222E-424E-A3B4-9CF48E5C62C7", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr14q4:*:*:*:*:*:*", "matchCriteriaId": "6B63F606-9FF5-40D9-8235-5ADF698DA17C", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr15q1:*:*:*:*:*:*", "matchCriteriaId": "93C6C994-C84A-4892-8C21-5CC4085023AF", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr15q1.1:*:*:*:*:*:*", "matchCriteriaId": "712B63FA-B463-4C2C-B080-0360FE5D2298", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr15q1.2:*:*:*:*:*:*", "matchCriteriaId": "18908DA4-649E-4DE0-B0CA-B0E1AC36DAB3", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr15q1.3:*:*:*:*:*:*", "matchCriteriaId": "F22DD037-F01E-47C0-A5E4-FD9B208CF38A", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr15q1.4:*:*:*:*:*:*", "matchCriteriaId": "81E4434B-C731-4D29-A9BB-43717F8A7B34", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr15q1.5:*:*:*:*:*:*", "matchCriteriaId": "7A829F63-0E25-440F-B80E-B6BF0E282A3F", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr15q2:*:*:*:*:*:*", "matchCriteriaId": "E6123B61-B2F2-415D-BFE4-20F861D6CD62", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr15q2.1:*:*:*:*:*:*", "matchCriteriaId": "BC8F43DB-8F05-450C-B03E-7C0A1F4B0554", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr15q2.2:*:*:*:*:*:*", "matchCriteriaId": "5875C4F1-BF7D-4AB0-8DDA-ED48E4378FA4", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr15q2.3:*:*:*:*:*:*", "matchCriteriaId": "C4292C09-FACB-448F-A193-D1D06BB8CBC2", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr15q2.4:*:*:*:*:*:*", "matchCriteriaId": "05CD4C95-9A2E-43DD-AB78-56A4421DC314", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr15q2.5:*:*:*:*:*:*", "matchCriteriaId": "75DC3B21-EB56-437A-B2D2-687FF6EDD5E7", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr15q2.6:*:*:*:*:*:*", "matchCriteriaId": "786DC47C-A294-49CC-8E3B-E0E1FD62BE5B", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr15q3:*:*:*:*:*:*", "matchCriteriaId": "24D1157C-08CA-48CF-B5F5-2E31B76F1EC3", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr15q3.1:*:*:*:*:*:*", "matchCriteriaId": "ADAE4ABA-F65C-4BD3-AEB3-48545C5397EA", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr15q3.2:*:*:*:*:*:*", "matchCriteriaId": "B1C85127-686B-4FF7-8CEC-0178CAFF0775", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr15q3.3:*:*:*:*:*:*", "matchCriteriaId": "6D094942-8D6B-49D9-8748-AF673896FF11", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr15q3.4:*:*:*:*:*:*", "matchCriteriaId": "7DE6F8AF-74FC-4688-9DD7-286446CF2763", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr15q3.5:*:*:*:*:*:*", "matchCriteriaId": "1916A1F0-FEB3-48C8-9ADD-D57A901ACF1E", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr15q4:*:*:*:*:*:*", "matchCriteriaId": "0E93E66F-5D16-4A1B-BB80-A6705AF0B63B", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr15q4.1:*:*:*:*:*:*", "matchCriteriaId": "033CE64E-67F5-44B4-941A-15DC4F4CBCBD", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr15q4.2:*:*:*:*:*:*", "matchCriteriaId": "8AC5326C-F9F8-40BD-89A9-A47F3E069E2A", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr15q4.3:*:*:*:*:*:*", "matchCriteriaId": "C59F89A4-413E-4731-AB9F-E5C96AE99837", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr15q4.4:*:*:*:*:*:*", "matchCriteriaId": "ABA3480F-A894-4F9F-BE9B-1E203BC8C089", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr15q4.5:*:*:*:*:*:*", "matchCriteriaId": "47F60375-1807-44CD-A594-AC04B7E039E3", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr15q4.6:*:*:*:*:*:*", "matchCriteriaId": "D338701F-2203-4AF6-96AC-B5B88891E481", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr16q1:*:*:*:*:*:*", "matchCriteriaId": "CD741089-08E2-490A-87A9-61CCA74C9278", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr16q1.1:*:*:*:*:*:*", "matchCriteriaId": "C3551545-C3FF-46C8-BECC-1CCB8B1AD818", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr16q1.2:*:*:*:*:*:*", "matchCriteriaId": "30F4D853-7BC4-4151-9BB6-9114D5B53EC9", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr16q1.3:*:*:*:*:*:*", "matchCriteriaId": "967ED834-83E3-4E12-8015-79F9F424BB56", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr16q2:*:*:*:*:*:*", "matchCriteriaId": "C8887C00-5D65-40A7-9404-6246F7988631", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr16q2.1:*:*:*:*:*:*", "matchCriteriaId": "DF9A17C5-F8EE-4BF2-ABB4-80A329331BAF", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr16q2.2:*:*:*:*:*:*", "matchCriteriaId": "810A1FB6-71E7-4432-A632-67C6927CBD56", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr16q2.3:*:*:*:*:*:*", "matchCriteriaId": "A7891097-062B-4A2B-AC62-06C34948F1A9", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr16q2.4:*:*:*:*:*:*", "matchCriteriaId": "B55615D6-A13A-4B46-8699-8CE8B1590657", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr16q3:*:*:*:*:*:*", "matchCriteriaId": "75FB3827-8A94-4FD2-BD5E-AFC4AF82DD97", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr16q3.1:*:*:*:*:*:*", "matchCriteriaId": "865E4A52-85FC-4AEA-A89B-A80660BD406B", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr16q3.2:*:*:*:*:*:*", "matchCriteriaId": "BB0845D5-267B-4452-A787-F28755DDBB3B", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr16q3.3:*:*:*:*:*:*", "matchCriteriaId": "0D01B669-1698-4604-A4BA-6FFEB7BB70F4", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr16q3.4:*:*:*:*:*:*", "matchCriteriaId": "E54EEFA4-8BF1-42FF-A58C-08CC2E3DE170", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr16q3.5:*:*:*:*:*:*", "matchCriteriaId": "0CD58BCF-64EB-4C76-95ED-1CFDC468157E", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr16q4:*:*:*:*:*:*", "matchCriteriaId": "9FFD4066-9A06-43D2-A746-A526E654575E", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr16q4.1:*:*:*:*:*:*", "matchCriteriaId": "F0BD0DF6-55EE-4814-8424-85E0F6321870", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr16q4.2:*:*:*:*:*:*", "matchCriteriaId": "70F7E8CC-0520-4E5B-A7DF-339EDED03EA9", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr16q4.3:*:*:*:*:*:*", "matchCriteriaId": "EDFEEA83-4910-4A04-BED9-054626041250", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr16q4.4:*:*:*:*:*:*", "matchCriteriaId": "1B6EB6FB-80E5-4A1C-9861-41A86B9CE750", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr17q1:*:*:*:*:*:*", "matchCriteriaId": "0666BC18-AADF-4EE2-9883-F89294036FBD", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr17q1.1:*:*:*:*:*:*", "matchCriteriaId": "9F83B714-F3B6-4376-8C11-5A79AC2972D4", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr17q1.2:*:*:*:*:*:*", "matchCriteriaId": "70DCEC35-E912-4182-9720-B89350A7AB05", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr17q1.3:*:*:*:*:*:*", "matchCriteriaId": "33364A53-37B3-40FA-94C0-B743B64C2153", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr17q2:*:*:*:*:*:*", "matchCriteriaId": "6AC718E2-6D20-465F-A344-504F514381B6", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr17q2.1:*:*:*:*:*:*", "matchCriteriaId": "FA897D52-EAD7-466E-8EF2-81DABDBEB959", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr17q2.2:*:*:*:*:*:*", "matchCriteriaId": "3DD09127-1DD9-42DC-8B68-CB810C255DE0", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr17q2.3:*:*:*:*:*:*", "matchCriteriaId": "48E1CE89-3122-4CDA-81EB-9CD69CB40E54", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr17q2.4:*:*:*:*:*:*", "matchCriteriaId": "59EC2319-7133-4435-A416-BE855B3675D3", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr17q3:*:*:*:*:*:*", "matchCriteriaId": "DB26DCAD-DF6A-4C30-BBE2-0DE4AC28C449", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr17q3.1:*:*:*:*:*:*", "matchCriteriaId": "B80B2382-77E6-41CB-BFEE-B21C4AB22959", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr17q3.2:*:*:*:*:*:*", "matchCriteriaId": "5FB8D244-4A71-4799-9A4E-64151DDA804C", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr17q3.3:*:*:*:*:*:*", "matchCriteriaId": "FF959A24-32D2-43BF-883E-78B8DBDF2DE2", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr17q4:*:*:*:*:*:*", "matchCriteriaId": "8BAA9AA3-65F4-4148-BC1A-5E81CCB7E8C9", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr17q4.1:*:*:*:*:*:*", "matchCriteriaId": "256C6A78-C56A-402C-B413-C8CA3F5571BC", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr17q4.2:*:*:*:*:*:*", "matchCriteriaId": "2E264AB4-96D7-4892-A57F-2A7564B9ACC2", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr18q1:*:*:*:*:*:*", "matchCriteriaId": "AD577A43-6FC6-48D1-BEDE-471BF7A9EB37", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr18q1.1:*:*:*:*:*:*", "matchCriteriaId": "43A03A0B-4980-408A-B708-819E8999F531", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr18q1.2:*:*:*:*:*:*", "matchCriteriaId": "EA0DFADB-CCE2-4318-8281-B33E68272C89", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr18q1.3:*:*:*:*:*:*", "matchCriteriaId": "08C6E8F7-2956-49D2-97CC-1663CB034DDC", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr18q2:*:*:*:*:*:*", "matchCriteriaId": "591C01C3-6C5C-4F28-BFA6-13E147DA7FDC", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr18q2.1:*:*:*:*:*:*", "matchCriteriaId": "7CBDA2E6-3423-4ADD-9CE7-7BC9C4492D6C", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr18q2.2:*:*:*:*:*:*", "matchCriteriaId": "C1F13954-088C-4192-997E-0743FD9A1E5C", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr18q2.3:*:*:*:*:*:*", "matchCriteriaId": "1C0E114C-B067-4181-9738-F55FB9978B36", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr18q3:*:*:*:*:*:*", "matchCriteriaId": "B2E7FA76-7010-49D5-956F-C989790B25E8", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr18q3.1:*:*:*:*:*:*", "matchCriteriaId": "76060308-900A-4ACB-A5F8-B1ECC5D3705D", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr18q3.2:*:*:*:*:*:*", "matchCriteriaId": "1BFBED77-EB95-404C-BD00-7137F60B1F7C", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr18q3.3:*:*:*:*:*:*", "matchCriteriaId": "632A718E-D6CB-4632-8CFC-1708A64E25B7", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr18q3.4:*:*:*:*:*:*", "matchCriteriaId": "4B5DA832-9927-45FE-9B9D-32D34C66CF38", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr18q3.5:*:*:*:*:*:*", "matchCriteriaId": "620EBCD9-5785-40A5-A8F3-2B3240D5AC45", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr18q4:*:*:*:*:*:*", "matchCriteriaId": "71AAD671-4A8C-4154-AE18-A3F0C31033C6", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr18q4.1:*:*:*:*:*:*", "matchCriteriaId": "44A153C0-53CA-49C9-A2CF-5454CC2167D1", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr18q4.2:*:*:*:*:*:*", "matchCriteriaId": "E574310A-19DF-4555-BA04-061B75C9992C", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr18q4.3:*:*:*:*:*:*", "matchCriteriaId": "F5562198-EE67-4A3B-8C98-FC322AA5EA17", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr19q1:*:*:*:*:*:*", "matchCriteriaId": "3B7E3C78-7094-4D34-878B-E3748CE26ADF", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr19q1.1:*:*:*:*:*:*", "matchCriteriaId": "6507AA36-19E6-4D95-9642-AE0DB481D2F0", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbravo:openbravo_erp:3.0:pr19q1.2:*:*:*:*:*:*", "matchCriteriaId": "3894F258-5A1A-4BF1-A042-1A0BAB8AB5C5", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Openbravo ERP before 3.0PR19Q1.3 is affected by Directory Traversal. This vulnerability could allow remote authenticated attackers to replace a file on the server via the getAttachmentDirectoryForNewAttachment inpKey value."}, {"lang": "es", "value": "ERP de Openbravo anterior a versi\u00f3n 3.0PR19Q1.3, est\u00e1 afectada por el Salto de Directorio. Esta vulnerabilidad podr\u00eda permitir a los atacantes autenticados remotos reemplazar un archivo en el servidor por medio del valor de inpKey de la funci\u00f3n getAttachmentDirectoryForNewAttachment."}], "id": "CVE-2019-14362", "lastModified": "2019-08-14T11:21:19.377", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 5.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "version": "3.0"}, "exploitabilityScore": 2.8, "impactScore": 2.5, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2019-07-28T18:15:11.043", "references": [{"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "https://grep.blog/directory-traversal-openbravo/"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Patch", "Vendor Advisory"], "url": "https://issues.openbravo.com/view.php?id=41413"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Third Party Advisory"], "url": "https://www.sitincloud.com/securite/directory-traversal-openbravo-erp/"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-22"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}