Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownApache OFBiz Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 25.74%Sep 29, 2026
- UnknownApache OFBiz Deserialization of Untrusted DataPatch nowKEVEPSS 81.21%Jun 22, 2026
- High8.8Improper Control of Generation of Code ('Code Injection'), Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') vulnerability in Apache OFBiz.Check if you run itEPSS 0.71%May 19, 2026
- Critical9.8Improper Authentication vulnerability in Apache OFBiz via Password-Change Logic Flaw Leading to Remote Code Execution This issue affects Apache OFBiz: before 24.09.06.Check if you run itEPSS 1.29%May 19, 2026
- Medium6.5Improper Authorization vulnerability in Apache OFBiz Webtools.Check if you run itEPSS 0.65%May 19, 2026
- Critical9.1Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability in Apache OFBiz.Check if you run itEPSS 0.59%May 19, 2026
- Medium6.5Improper Control of Generation of Code ('Code Injection') vulnerability in email services of Apache OFBiz.Check if you run itEPSS 0.63%May 19, 2026
- Critical9.1Use of Hard-coded Cryptographic Key vulnerability in Apache OFBiz.Check if you run itEPSS 0.56%May 19, 2026
- High7.5Server-Side Request Forgery (SSRF) vulnerability in Apache OFBiz.Check if you run itEPSS 0.58%May 19, 2026
- High7.5Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache OFBiz.Check if you run itEPSS 0.61%May 19, 2026
- Medium6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache OFBiz.Check if you run itEPSS 0.57%May 19, 2026
- Medium5.3Improper Access Control vulnerability in Apache OFBiz in multi-tenant deployments.Check if you run itEPSS 0.54%May 19, 2026
- Medium5.3Improper Authentication vulnerability in Apache OFBiz.Check if you run itEPSS 0.60%May 19, 2026
- Medium6.5Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection') vulnerability in Apache OFBiz.Check if you run itEPSS 0.63%May 19, 2026
- Medium6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'), Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), I…Check if you run itEPSS 0.70%May 19, 2026
- Medium6.5Improper Input Validation vulnerability in Apache OFBiz.Check if you run itEPSS 0.67%May 19, 2026
- High7.3Server-Side Request Forgery (SSRF) vulnerability in Apache OFBiz via Content component operations.Check if you run itEPSS 0.61%May 19, 2026
- Medium6.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz.Check if you run itEPSS 0.80%May 19, 2026
- Medium6.5Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Apache OFBiz.Check if you run itEPSS 0.63%May 19, 2026
- UnknownApache OFBiz Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 10.18%Jun 7, 2025
- UnknownApache OFBiz Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 93.23%Dec 5, 2024
- High7.5Apache OFBiz Forced Browsing VulnerabilityPatch nowKEVEPSS 99.98%Sep 4, 2024
- UnknownApache OFBiz Improper Restricted Pathname Limitation VulnerabilityPatch nowKEVEPSS 87.88%Aug 19, 2024
- Critical9.8Apache OFBiz Incorrect Authorization VulnerabilityPatch nowKEVEPSS 99.43%Aug 5, 2024
- Critical9.8Apache OFBiz Path Traversal VulnerabilityPatch nowKEVEPSS 99.92%May 8, 2024
32 records · page 1 of 2
PreviousNext