Apache Ofbiz
Approved changes feed: RSS · Atom
cpe:2.3:a:apache_software_foundation:apache_ofbiz:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Apache Software Foundation (f563070d-e18f-561b-b86c-987936937e8a) |
|---|---|
| Product | Apache Ofbiz (b53e11a6-d4cb-560a-87d7-64f42e51a10c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-50223 |
vulnerable | 2026-07-29 00:57:47.653744 |
Apache OFBiz: DataResource Low-Privileged Authenticated FreeMarker Template Injection Leads to Remote Code Execution
Improper Control of Generation of Code ('Code Injection') vulnerability in Apache OFBiz allows a low-privileged authenticated user with Content/DataResource editing privileges to perform template injection attacks that could lead to Remote Code Execution.
This issue affects Apache OFBiz: before 24.09.07.
Users are recommended to upgrade to version 24.09.07, which fixes the issue.
Published: 2026-06-10T22:23:49.650Z
Updated: 2026-06-12T03:55:27.599Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-47342 |
vulnerable | 2026-07-29 00:55:00.121398 |
Apache OFBiz: Privilege Escalation via updateOrRemove Authorization Bypass
A privilege escalation vulnerability in Apache OFBiz allows a low-privileged authenticated user to obtain higher privileges
This issue affects Apache OFBiz: before 24.09.07.
Users are recommended to upgrade to version 24.09.07, which fixes the issue.
Published: 2026-06-10T22:29:06.793Z
Updated: 2026-06-12T12:44:44.347Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-46586 |
vulnerable | 2026-06-08 08:05:12.097326 |
Apache OFBiz: Improper Validation in traverseContent Service Enables Authenticated Groovy Code Execution
Improper Control of Generation of Code ('Code Injection'), Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') vulnerability in Apache OFBiz.
This issue affects Apache OFBiz: before 24.09.06.
Users are recommended to upgrade to version 24.09.06, which fixes the issue.
Published: 2026-05-19T09:41:39.546Z
Updated: 2026-05-20T15:33:41.602Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-45434 |
vulnerable | 2026-06-08 08:05:11.756187 |
Apache OFBiz: Authentication Bypass via Password-Change Logic Flaw Leading to RCE
Improper Authentication vulnerability in Apache OFBiz via Password-Change Logic Flaw Leading to Remote Code Execution
This issue affects Apache OFBiz: before 24.09.06.
Users are recommended to upgrade to version 24.09.06, which fixes the issue.
Published: 2026-05-19T09:40:26.892Z
Updated: 2026-05-20T15:34:15.862Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-45187 |
vulnerable | 2026-06-08 08:05:11.495053 |
Apache OFBiz: Improper Authorization in Scheduled Job Creation Allows Low-Privileged Users to Submit System Jobs
Improper Authorization vulnerability in Apache OFBiz Webtools.
This issue affects Apache OFBiz: before 24.09.06.
Users are recommended to upgrade to version 24.09.06, which fixes the issue.
Published: 2026-05-19T09:39:27.294Z
Updated: 2026-05-19T18:37:23.236Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-41919 |
vulnerable | 2026-06-08 08:03:15.772660 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-35086 |
vulnerable | 2026-06-08 07:59:13.629936 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-31986 |
vulnerable | 2026-06-08 07:57:16.178171 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-31910 |
vulnerable | 2026-06-08 07:57:16.093095 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-31909 |
vulnerable | 2026-06-08 07:57:16.092676 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-31906 |
vulnerable | 2026-06-08 07:57:16.089436 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-31388 |
vulnerable | 2026-06-08 07:57:14.807156 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-31387 |
vulnerable | 2026-06-08 07:57:14.801941 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-31380 |
vulnerable | 2026-06-08 07:57:14.795126 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-31379 |
vulnerable | 2026-06-08 07:57:14.794737 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-31378 |
vulnerable | 2026-06-08 07:57:14.793241 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-29226 |
vulnerable | 2026-06-08 07:55:16.234254 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-29220 |
vulnerable | 2026-06-08 07:55:16.233948 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-29207 |
vulnerable | 2026-06-08 07:55:16.232322 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-61623 |
vulnerable | 2026-06-08 07:37:27.679038 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59118 |
vulnerable | 2026-06-08 07:35:20.025627 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-54466 |
vulnerable | 2026-06-08 07:33:12.624103 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-30676 |
vulnerable | 2026-06-08 07:17:01.481786 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26865 |
vulnerable | 2026-06-08 07:14:50.587110 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-48962 |
vulnerable | 2026-06-08 06:50:11.772470 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47208 |
vulnerable | 2026-06-08 06:48:11.573812 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45507 |
vulnerable | 2026-06-08 06:48:06.409563 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45195 |
vulnerable | 2026-06-08 06:45:55.587214 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-38856 |
vulnerable | 2026-06-08 06:41:48.232785 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-36104 |
vulnerable | 2026-06-08 06:39:43.644731 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-32113 |
vulnerable | 2026-06-08 06:35:32.744671 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-25065 |
vulnerable | 2026-06-08 06:31:21.885259 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23946 |
vulnerable | 2026-06-08 06:29:40.993159 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-51467 |
vulnerable | 2026-06-08 06:16:17.590483 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-50968 |
vulnerable | 2026-06-08 06:16:17.162277 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49070 |
vulnerable | 2026-06-08 06:14:28.380239 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-46819 |
vulnerable | 2026-06-08 06:14:23.489849 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-47501 |
vulnerable | 2026-06-08 05:50:40.643266 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29158 |
vulnerable | 2026-06-08 05:42:47.019664 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29063 |
vulnerable | 2026-06-08 05:42:46.413522 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25813 |
vulnerable | 2026-06-08 05:41:49.500749 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25371 |
vulnerable | 2026-06-08 05:41:45.858651 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25370 |
vulnerable | 2026-06-08 05:41:45.857352 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-37608 |
vulnerable | 2026-06-08 05:32:54.472784 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-30128 |
vulnerable | 2026-06-08 05:31:46.921095 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-29200 |
vulnerable | 2026-06-08 05:31:25.914807 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-26295 |
vulnerable | 2026-06-08 05:30:42.174070 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-8033 |
vulnerable | 2026-06-08 05:12:05.082234 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-15714 |
vulnerable | 2026-06-08 05:08:59.494438 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-6800 |
vulnerable | 2026-06-08 05:08:10.975848 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-4462 |
vulnerable | 2026-06-08 05:07:54.544776 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.