Filters

Versions

16.11.01
9
11.04.01
6
12.04.01
6
10.04.01
5
11.04.02
5
10.04.02
4
12.04.02
4
12.04.03
4
10.04.03
3
10.04.04
3
11.04.03
3
11.04.04
3
12.04
3
12.04.04
3
12.04.05
3
13.07
3
13.07.01
3
13.07.02
3
16.11.05
3
17.12.01
3
18.12.11
3
09.04
2
10.04
2
10.04.05
2
11.04
2
11.04.05
2
11.04.06
2
12.04.06
2
13.07.03
2
16.11.04
2
09.04.01
1
16.11.02
1
16.11.03
1
16.11.06
1
16.11.07
1
17.12.03
1
18.12.10
1
18.12.15
1

Apache OFBizApache OFBiz: Prevent use of URLs in files when loading them from Java or Groovy, leading to a RCE

critical
9.8
First published (updated )
CVE-2024-45507

Apache OFBizApache OFBiz: Confused controller-view authorization logic (forced browsing)

critical
9.8
First published (updated )
CVE-2024-45195

Apache OFBizApache OFBiz Incorrect Authorization Vulnerability

critical
9.8
Exploited
First published (updated )
CVE-2024-38856

Apache OFBizApache OFBiz Path Traversal Vulnerability

critical
9.8
Exploited
First published (updated )
CVE-2024-32113

Apache OFBizApache OFBiz: Path traversal or file inclusion

medium
5.3
EPSS
0.05%
First published (updated )
CVE-2024-23946

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

BleepingComputerApache OFBiz RCE flaw exploited to find vulnerable Confluence servers

First published (updated )
News
BleepingComputer

Apache OFBizApache OFBiz: Pre-authentication Remote Code Execution (RCE) vulnerability

critical
9.8
Zeroday
First published (updated )
CVE-2023-51467

Apache OFBizApache OFBiz: Arbitrary file properties reading and SSRF attack

high
7.5
First published (updated )
CVE-2023-50968

Apache OFBizPre-auth RCE in Apache Ofbiz 18.12.09 due to XML-RPC still present

critical
9.8
Zeroday
First published (updated )
CVE-2023-49070

Apache OFBizApache OFBiz: Execution of Solr plugin queries without authentication

medium
5.3
First published (updated )
CVE-2023-46819

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Apache OFBizApache OFBiz: Arbitrary file reading vulnerability

high
7.5
First published (updated )
CVE-2022-47501

Apache OFBizRegular Expression Denial of Service (ReDoS) vulnerability in Apache OFBiz

high
7.5
First published (updated )
CVE-2022-29158

Apache OFBizJava Deserialization via RMI Connection from the Solr plugin of Apache OFBiz

critical
9.8
First published (updated )
CVE-2022-29063

Apache OFBizServer-Side Template Injection affecting the ecommerce plugin of Apache OFBiz

high
7.5
First published (updated )
CVE-2022-25813

Apache OFBizUnauth Path Traversal with file corruption affecting the Birt plugin of Apache OFBiz

critical
9.8
First published (updated )
CVE-2022-25371

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Apache OFBizUnauth Stored XSS vulnerability in the Birt plugin of Apache OFBiz

medium
5.4
First published (updated )
CVE-2022-25370

Apache OFBizGeneration of Error Message Containing Sensitive Information in Apache OFBiz

high
7.5
First published (updated )
CVE-2021-25958

Apache OFBizArbitrary file upload vulnerability in OFBiz

critical
9.8
First published (updated )
CVE-2021-37608

Apache OFBizUnsafe deserialization in Apache OFBiz

critical
10
First published (updated )
CVE-2021-30128

Apache OFBizRCE vulnerability in latest Apache OFBiz due to Java serialisation using RMI

critical
9.8
First published (updated )
CVE-2021-29200

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Apache OFBizRCE vulnerability in latest Apache OFBiz due to Java serialisation using RMI

critical
9.8
First published (updated )
CVE-2021-26295

Apache OFBizXSS

medium
6.1
First published (updated )
CVE-2020-9496

Apache OFBizIDOR vulnerability in the order processing feature from ecommerce component of Apache OFBiz before 1…

medium
5.3
First published (updated )
CVE-2020-13923

Apache OFBizCSRF

high
8.8
First published (updated )
CVE-2019-0235

Apache OFBizCSRF

high
7.5
First published (updated )
CVE-2019-12425

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Apache OFBizXSS

medium
6.1
First published (updated )
CVE-2020-1943

Apache OFBizan unauthenticated user could get access to information of some backend screens by invoking setSessi…

medium
5.3
First published (updated )
CVE-2019-12426

Apache OFBizXEE

high
7.5
First published (updated )
CVE-2011-3600

Apache OFBizAn RCE is possible by entering Freemarker markup in an Apache OFBiz Form Widget textarea field when …

critical
9.8
First published (updated )
CVE-2019-10074

Apache OFBizXSS

medium
6.1
First published (updated )
CVE-2019-10073

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Apache OFBizThe java.io.ObjectInputStream is known to cause Java serialisation issues. This issue here is expose…

critical
9.8
First published (updated )
CVE-2019-0189

Apache OFBizThe Apache OFBiz HTTP engine (org.apache.ofbiz.service.engine.HttpEngine.java) handles requests for …

critical
9.8
First published (updated )
CVE-2018-17200

Apache OFBizInfoleak

high
7.5
First published (updated )
CVE-2018-8033

Apache OFBizXSS, Code Injection

critical
9.8
First published (updated )
CVE-2017-15714

Apache OFBizApache OFBiz 10.04.x before 10.04.02 allows remote attackers to execute arbitrary code via unspecifi…

critical
9.8
First published (updated )
CVE-2012-1622

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Apache OFBizInput Validation

high
8.8
First published (updated )
CVE-2016-4462

Apache OFBizXSS

medium
6.1
First published (updated )
CVE-2016-6800

Apache OFBizXSS

medium
6.1
First published (updated )
CVE-2015-3268

Apache OFBizInput Validation

critical
9.8
First published (updated )
CVE-2016-2170

Apache OFBizXSS

medium
4.3
First published (updated )
CVE-2014-0232

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Apache OFBizXSS

medium
4.3
First published (updated )
CVE-2012-1621

Apache OFBizXSS

low
3.5
First published (updated )
CVE-2013-0177

Apache OFBizInput Validation

critical
10
First published (updated )
CVE-2013-2250

Apache OFBizXSS

medium
4.3
First published (updated )
CVE-2013-2137

Apache OFBizUnspecified vulnerability in the Apache Open For Business Project (aka OFBiz) 10.04.x before 10.04.0…

critical
10
First published (updated )
CVE-2012-3506

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Apache OFBizXSS

medium
4.3
First published (updated )
CVE-2010-0432

Apache OpentapsXSS

medium
6.8
First published (updated )
CVE-2006-6589

Apache OFBizThe forum implementation in the ecommerce component in the Apache Open For Business Project (OFBiz) …

high
7.5
First published (updated )
CVE-2006-6588

Apache OFBizXSS

medium
6.8
First published (updated )
CVE-2006-6587

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203