cve.bz

apache ofbiz vulnerabilities in 2023, newest first

Filter

By year: all 2026 2025 2024 2023 2022 2021

  1. 9.8CVE-2023-51467ExploitEPSS 96%

    The vulnerability permits attackers to circumvent authentication processes, enabling them to remotely execute arbitrary code

  2. 7.5CVE-2023-50968ExploitEPSS 63%

    Arbitrary file properties reading vulnerability in Apache Software Foundation Apache OFBiz when user operates an uri call without authorizations. The same uri can be operated to realize a SSRF attack also without authorizations. Users …

  3. 9.8CVE-2023-49070ExploitEPSS 95%

    Pre-auth RCE in Apache Ofbiz 18.12.09. It's due to XML-RPC no longer maintained still present. This issue affects Apache OFBiz: before 18.12.10.  Users are recommended to upgrade to version 18.12.10

  4. 5.3CVE-2023-46819EPSS 2.4%

    Missing Authentication in Apache Software Foundation Apache OFBiz when using the Solr plugin. This issue affects Apache OFBiz: before 18.12.09.  Users are recommended to upgrade to version 18.12.09

  5. 7.5CVE-2022-47501ExploitEPSS 10%

    Arbitrary file reading vulnerability in Apache Software Foundation Apache OFBiz when using the Solr plugin. This is a  pre-authentication attack. This issue affects Apache OFBiz: before 18.12.07.