| CVE-2026-45187 |
Improper Authorization vulnerability in Apache OFBiz Webtools
|
Non notée
|
19 mai 2026 |
| CVE-2026-41919 |
Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability in Apache OFBiz
|
Non notée
|
19 mai 2026 |
| CVE-2026-35086 |
Apache OFBiz: Authenticated Remote Code Execution via Unsafe Template Expansion in email services
|
Non notée
|
19 mai 2026 |
| CVE-2026-31986 |
Use of Hard-coded Cryptographic Key vulnerability in Apache OFBiz
|
Non notée
|
19 mai 2026 |
| CVE-2026-31910 |
Server-Side Request Forgery (SSRF) vulnerability in Apache OFBiz
|
Non notée
|
19 mai 2026 |
| CVE-2026-31909 |
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache OFBiz
|
Non notée
|
19 mai 2026 |
| CVE-2026-31906 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache OFBiz
|
Non notée
|
19 mai 2026 |
| CVE-2026-31388 |
Improper Access Control vulnerability in Apache OFBiz in multi-tenant deployments
|
Non notée
|
19 mai 2026 |
| CVE-2026-31387 |
Improper Authentication vulnerability in Apache OFBiz
|
Non notée
|
19 mai 2026 |
| CVE-2026-31380 |
Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')…
|
Non notée
|
19 mai 2026 |
| CVE-2026-31379 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'), Improper Limitation of a…
|
Non notée
|
19 mai 2026 |
| CVE-2026-31378 |
Improper Input Validation vulnerability in Apache OFBiz
|
Non notée
|
19 mai 2026 |
| CVE-2026-29226 |
Server-Side Request Forgery (SSRF) vulnerability in Apache OFBiz via Content component operations
|
Non notée
|
19 mai 2026 |
| CVE-2026-29207 |
Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Apache OFBiz
|
Non notée
|
19 mai 2026 |
| CVE-2026-29220 |
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz
|
Non notée
|
19 mai 2026 |
| CVE-2025-61623 |
Reflected cross-site scripting vulnerability in Apache OFBiz
|
Non notée
|
12 nov. 2025 |
| CVE-2025-59118 |
Unrestricted Upload of File with Dangerous Type vulnerability in Apache OFBiz
|
Non notée
|
12 nov. 2025 |
| CVE-2025-54466 |
Improper Control of Generation of Code ('Code Injection') vulnerability leading to a possible RCE in Apache…
|
Non notée
|
15 août 2025 |
| CVE-2025-30676 |
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Apache OFBiz
|
Non notée
|
1 avr. 2025 |
| CVE-2025-26865 |
Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Apache OFBiz
|
Non notée
|
10 mars 2025 |
| CVE-2024-47208 |
Server-Side Request Forgery (SSRF), Improper Control of Generation of Code ('Code Injection') vulnerability in Apache…
|
Non notée
|
18 nov. 2024 |
| CVE-2024-48962 |
Improper Control of Generation of Code ('Code Injection'), Cross-Site Request Forgery (CSRF), : Improper…
|
8.9
Élevée
|
18 nov. 2024 |
| CVE-2024-45195 |
Exploitée
Apache OFBiz Forced Browsing Vulnerability
|
Non notée
|
4 sept. 2024 |
| CVE-2024-45507 |
Server-Side Request Forgery (SSRF), Improper Control of Generation of Code ('Code Injection') vulnerability in Apache…
|
Non notée
|
4 sept. 2024 |
| CVE-2024-38856 |
Exploitée
Apache OFBiz Incorrect Authorization Vulnerability
|
Non notée
|
5 août 2024 |