Approved changes feed: RSS · Atom
cpe:2.3:a:apache:ofbiz:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Apache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95) |
|---|---|
| Product | Ofbiz (3603fcf6-7ff0-5cae-b097-d1fba79a6c6e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:apache/ofbiz |
purl2cpe | 2026-06-01 10:14:26.493124 |
pkg:github/apache/ofbiz |
purl2cpe | 2026-06-01 10:14:26.493125 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-46586 |
vulnerable | 2026-06-08 08:05:12.097362 |
Apache OFBiz: Improper Validation in traverseContent Service Enables Authenticated Groovy Code Execution
Improper Control of Generation of Code ('Code Injection'), Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') vulnerability in Apache OFBiz.
This issue affects Apache OFBiz: before 24.09.06.
Users are recommended to upgrade to version 24.09.06, which fixes the issue.
Published: 2026-05-19T09:41:39.546Z
Updated: 2026-05-20T15:33:41.602Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-45434 |
vulnerable | 2026-06-08 08:05:11.756222 |
Apache OFBiz: Authentication Bypass via Password-Change Logic Flaw Leading to RCE
Improper Authentication vulnerability in Apache OFBiz via Password-Change Logic Flaw Leading to Remote Code Execution
This issue affects Apache OFBiz: before 24.09.06.
Users are recommended to upgrade to version 24.09.06, which fixes the issue.
Published: 2026-05-19T09:40:26.892Z
Updated: 2026-05-20T15:34:15.862Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-45187 |
vulnerable | 2026-06-08 08:05:11.495813 |
Apache OFBiz: Improper Authorization in Scheduled Job Creation Allows Low-Privileged Users to Submit System Jobs
Improper Authorization vulnerability in Apache OFBiz Webtools.
This issue affects Apache OFBiz: before 24.09.06.
Users are recommended to upgrade to version 24.09.06, which fixes the issue.
Published: 2026-05-19T09:39:27.294Z
Updated: 2026-05-19T18:37:23.236Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-41919 |
vulnerable | 2026-06-08 08:03:15.773760 |
Apache OFBiz: Authentication Bypass due to Improper Neutralization of LDAP Special Elements in DN Construction
Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability in Apache OFBiz.
This issue affects Apache OFBiz: before 24.09.06.
Users are recommended to upgrade to version 24.09.06, which fixes the issue.
Published: 2026-05-19T09:36:55.524Z
Updated: 2026-05-19T18:37:22.296Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-35086 |
vulnerable | 2026-06-08 07:59:13.630789 |
Apache OFBiz: Authenticated Remote Code Execution via Unsafe Template Expansion in email services
Improper Control of Generation of Code ('Code Injection') vulnerability in email services of Apache OFBiz.
This issue affects Apache OFBiz: before 24.09.06.
Users are recommended to upgrade to version 24.09.06, which fixes the issue.
Published: 2026-05-19T09:36:00.229Z
Updated: 2026-05-20T03:55:19.849Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-31986 |
vulnerable | 2026-06-08 07:57:16.178342 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-31910 |
vulnerable | 2026-06-08 07:57:16.093130 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-31909 |
vulnerable | 2026-06-08 07:57:16.092720 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-31906 |
vulnerable | 2026-06-08 07:57:16.089481 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-31388 |
vulnerable | 2026-06-08 07:57:14.807197 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-31387 |
vulnerable | 2026-06-08 07:57:14.806702 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-31380 |
vulnerable | 2026-06-08 07:57:14.795287 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-31379 |
vulnerable | 2026-06-08 07:57:14.794864 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-31378 |
vulnerable | 2026-06-08 07:57:14.794285 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-29226 |
vulnerable | 2026-06-08 07:55:16.234285 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-29220 |
vulnerable | 2026-06-08 07:55:16.233991 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-29207 |
vulnerable | 2026-06-08 07:55:16.233606 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-61623 |
vulnerable | 2026-06-08 07:37:27.680049 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59118 |
vulnerable | 2026-06-08 07:35:20.026703 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-54466 |
vulnerable | 2026-06-08 07:33:12.625022 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-30676 |
vulnerable | 2026-06-08 07:17:01.482683 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-48962 |
vulnerable | 2026-06-08 06:50:11.766101 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47208 |
vulnerable | 2026-06-08 06:48:11.573855 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45507 |
vulnerable | 2026-06-08 06:48:06.410395 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45195 |
vulnerable | 2026-06-08 06:45:55.585842 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-38856 |
vulnerable | 2026-06-08 06:41:48.231850 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-36104 |
vulnerable | 2026-06-08 06:39:43.645834 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-32113 |
vulnerable | 2026-06-08 06:35:32.743890 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-25065 |
vulnerable | 2026-06-08 06:31:21.883338 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23946 |
vulnerable | 2026-06-08 06:29:40.992402 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-51467 |
vulnerable | 2026-06-08 06:16:17.590658 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-50968 |
vulnerable | 2026-06-08 06:16:17.162901 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49070 |
vulnerable | 2026-06-08 06:14:28.380414 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-46819 |
vulnerable | 2026-06-08 06:14:23.490812 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-47501 |
vulnerable | 2026-06-08 05:50:40.642217 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29158 |
vulnerable | 2026-06-08 05:42:47.019698 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29063 |
vulnerable | 2026-06-08 05:42:46.414353 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25813 |
vulnerable | 2026-06-08 05:41:49.500787 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25371 |
vulnerable | 2026-06-08 05:41:45.858814 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25370 |
vulnerable | 2026-06-08 05:41:45.858035 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-37608 |
vulnerable | 2026-06-08 05:32:54.473517 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-30128 |
vulnerable | 2026-06-08 05:31:46.921842 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-29200 |
vulnerable | 2026-06-08 05:31:25.915412 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-26295 |
vulnerable | 2026-06-08 05:30:42.174128 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-25958 |
vulnerable | 2026-06-08 05:30:41.779478 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1943 |
vulnerable | 2026-06-08 05:21:03.631411 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13923 |
vulnerable | 2026-06-08 05:18:01.380363 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-12426 |
vulnerable | 2026-06-08 05:12:39.137178 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10074 |
vulnerable | 2026-06-08 05:12:22.101609 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10073 |
vulnerable | 2026-06-08 05:12:22.101192 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-0189 |
vulnerable | 2026-06-08 05:12:19.202216 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-8033 |
vulnerable | 2026-06-08 05:12:05.082833 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-17200 |
vulnerable | 2026-06-08 05:11:06.155719 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-2170 |
vulnerable | 2026-06-08 05:07:33.491344 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-3600 |
vulnerable | 2026-06-08 04:59:26.595468 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-0432 |
vulnerable | 2026-06-08 04:52:02.502832 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-6589 |
vulnerable | 2026-06-08 04:49:29.257694 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-6588 |
vulnerable | 2026-06-08 04:49:29.257372 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-6587 |
vulnerable | 2026-06-08 04:49:29.257018 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.