Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache OFBiz

97 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-45195 Exploited Public exploit Scanner template EPSS 100%

    Apache OFBiz: Confused controller-view authorization logic (forced browsing)

    Direct Request ('Forced Browsing') vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.16. Users are recommended to upgrade to version 18.12.16, which fixes the issue.

    Apache Software Foundation Apache OFBiz
    KEV Feb 4, 2025
  • High 8.1
    CVE-2024-38856 Exploited Public exploit Scanner template EPSS 99%

    Apache OFBiz: Unauthenticated endpoint could allow execution of screen rendering code

    Incorrect Authorization vulnerability in Apache OFBiz. This issue affects Apache OFBiz: through 18.12.14. Users are recommended to upgrade to version 18.12.15, which fixes the issue. Unauthenticated endpoints could allow execution of screen rendering code of …

    Apache Software Foundation Apache OFBiz
    KEV Aug 27, 2024
  • Critical 9.1
    CVE-2024-32113 Exploited Public exploit Scanner template EPSS 100%

    Apache OFBiz: Path traversal leading to RCE

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz.This issue affects Apache OFBiz: before 18.12.13. Users are recommended to upgrade to version 18.12.13, which fixes the issue.

    Apache Software Foundation Apache OFBiz
    KEV Aug 7, 2024