| CVE-2024-48962 |
Improper Control of Generation of Code ('Code Injection'), Cross-Site Request Forgery (CSRF), : Improper…
|
8.9
High
|
Nov 18, 2024 |
| CVE-2024-45195 |
Exploited
Apache OFBiz Forced Browsing Vulnerability
|
Not rated
|
Sep 4, 2024 |
| CVE-2024-38856 |
Exploited
Apache OFBiz Incorrect Authorization Vulnerability
|
Not rated
|
Aug 5, 2024 |
| CVE-2024-32113 |
Exploited
Apache OFBiz Path Traversal Vulnerability
|
Not rated
|
May 8, 2024 |
| CVE-2024-23946 |
Possible path traversal in Apache OFBiz allowing file inclusion
|
Not rated
|
Feb 28, 2024 |
| CVE-2024-25065 |
Possible path traversal in Apache OFBiz allowing authentication bypass
|
Not rated
|
Feb 28, 2024 |
| CVE-2022-47501 |
Arbitrary file reading vulnerability in Apache Software Foundation Apache OFBiz when using the Solr plugin
|
Not rated
|
Apr 14, 2023 |
| CVE-2019-10074 |
An RCE is possible by entering Freemarker markup in an Apache OFBiz Form Widget textarea field when encoding has been…
|
Not rated
|
Sep 11, 2019 |
| CVE-2019-10073 |
The "Blog", "Forum", "Contact Us" screens of the template "ecommerce" application bundled in Apache OFBiz are weak to…
|
Not rated
|
Sep 11, 2019 |
| CVE-2019-0189 |
The java.io.ObjectInputStream is known to cause Java serialisation issues
|
Not rated
|
Sep 11, 2019 |
| CVE-2018-17200 |
The Apache OFBiz HTTP engine (org.apache.ofbiz.service.engine.HttpEngine.java) handles requests for HTTP services via…
|
Not rated
|
Sep 11, 2019 |