Apache Ofbiz

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:apache:apache_ofbiz:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductApache Ofbiz (9c8d3080-c041-516e-b4cc-22953c02e06f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-1943 vulnerable 2026-06-08 05:21:03.630853 Details available
Data sent with contentId to /control/stream is not sanitized, allowing XSS attacks in Apache OFBiz 16.11.01 to 16.11.07.
Published: 2020-04-01T18:18:48.000Z
Updated: 2024-08-04T06:53:59.927Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-12426 vulnerable 2026-06-08 05:12:39.136294 Details available
an unauthenticated user could get access to information of some backend screens by invoking setSessionLocale in Apache OFBiz 16.11.01 to 16.11.06
Published: 2020-02-06T16:47:14.000Z
Updated: 2024-08-04T23:17:40.123Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-12425 vulnerable 2026-06-08 05:12:39.135118 Details available
Apache OFBiz 17.12.01 is vulnerable to Host header injection by accepting arbitrary host
Published: 2020-04-30T19:20:11.000Z
Updated: 2024-08-04T23:17:40.005Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0235 vulnerable 2026-06-08 05:12:19.484774 Details available
Apache OFBiz 17.12.01 is vulnerable to some CSRF attacks.
Published: 2020-04-30T19:22:20.000Z
Updated: 2024-08-04T17:44:15.925Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.