[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fd2SaMt4iI9_Whv7k6dYDYPQ5iL6le_3E3hAzYdaK0E4":3,"g5a-family:apache\u002Fofbiz":308,"g5a-ex:apache\u002Fofbiz@*":309},{"success":4,"data":5},true,{"product":6,"versions":150,"topVulnerabilitiesByEpss":215,"kevVulnerabilities":272,"seoMetadata":286,"meta":305},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":149},"apache","ofbiz",64,52,3,"2025-08-15",[14,19,21,24,27,30,32,34,36,38,40,43,45,47,49,51,53,55,57,59,61,63,65,67,69,71,73,75,77,79,81,83,85,87,89,91,93,95,97,99,101,103,105,107,109,111,113,115,117,119,121,123,125,127,129,131,133,135,137,139,141,143,145,147],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"09.04",1,0,false,{"version":20,"cve_count":16,"kev_count":17,"has_kev":18},"09.04.01",{"version":22,"cve_count":23,"kev_count":17,"has_kev":18},"10.04",2,{"version":25,"cve_count":26,"kev_count":17,"has_kev":18},"10.04.01",5,{"version":28,"cve_count":29,"kev_count":17,"has_kev":18},"10.04.02",4,{"version":31,"cve_count":11,"kev_count":17,"has_kev":18},"10.04.03",{"version":33,"cve_count":11,"kev_count":17,"has_kev":18},"10.04.04",{"version":35,"cve_count":23,"kev_count":17,"has_kev":18},"10.04.05",{"version":37,"cve_count":17,"kev_count":17,"has_kev":18},"10.04.06",{"version":39,"cve_count":23,"kev_count":17,"has_kev":18},"11.04",{"version":41,"cve_count":42,"kev_count":17,"has_kev":18},"11.04.01",6,{"version":44,"cve_count":26,"kev_count":17,"has_kev":18},"11.04.02",{"version":46,"cve_count":11,"kev_count":17,"has_kev":18},"11.04.03",{"version":48,"cve_count":11,"kev_count":17,"has_kev":18},"11.04.04",{"version":50,"cve_count":23,"kev_count":17,"has_kev":18},"11.04.05",{"version":52,"cve_count":23,"kev_count":17,"has_kev":18},"11.04.06",{"version":54,"cve_count":23,"kev_count":17,"has_kev":18},"12.04",{"version":56,"cve_count":42,"kev_count":17,"has_kev":18},"12.04.01",{"version":58,"cve_count":29,"kev_count":17,"has_kev":18},"12.04.02",{"version":60,"cve_count":29,"kev_count":17,"has_kev":18},"12.04.03",{"version":62,"cve_count":11,"kev_count":17,"has_kev":18},"12.04.04",{"version":64,"cve_count":11,"kev_count":17,"has_kev":18},"12.04.05",{"version":66,"cve_count":23,"kev_count":17,"has_kev":18},"12.04.06",{"version":68,"cve_count":23,"kev_count":17,"has_kev":18},"13.07",{"version":70,"cve_count":11,"kev_count":17,"has_kev":18},"13.07.01",{"version":72,"cve_count":11,"kev_count":17,"has_kev":18},"13.07.02",{"version":74,"cve_count":23,"kev_count":17,"has_kev":18},"13.07.03",{"version":76,"cve_count":16,"kev_count":17,"has_kev":18},"16.11.01",{"version":78,"cve_count":16,"kev_count":17,"has_kev":18},"16.11.02",{"version":80,"cve_count":16,"kev_count":17,"has_kev":18},"16.11.03",{"version":82,"cve_count":17,"kev_count":17,"has_kev":18},"16.11.04",{"version":84,"cve_count":17,"kev_count":17,"has_kev":18},"16.11.05",{"version":86,"cve_count":17,"kev_count":17,"has_kev":18},"16.11.06",{"version":88,"cve_count":17,"kev_count":17,"has_kev":18},"16.11.07",{"version":90,"cve_count":23,"kev_count":17,"has_kev":18},"17.12.01",{"version":92,"cve_count":16,"kev_count":17,"has_kev":18},"17.12.03",{"version":94,"cve_count":17,"kev_count":17,"has_kev":18},"17.12.04",{"version":96,"cve_count":17,"kev_count":17,"has_kev":18},"17.12.05",{"version":98,"cve_count":17,"kev_count":17,"has_kev":18},"17.12.06",{"version":100,"cve_count":17,"kev_count":17,"has_kev":18},"17.12.07",{"version":102,"cve_count":17,"kev_count":17,"has_kev":18},"17.12.08",{"version":104,"cve_count":17,"kev_count":17,"has_kev":18},"17.12.09",{"version":106,"cve_count":17,"kev_count":17,"has_kev":18},"18.12.01",{"version":108,"cve_count":17,"kev_count":17,"has_kev":18},"18.12.02",{"version":110,"cve_count":17,"kev_count":17,"has_kev":18},"18.12.03",{"version":112,"cve_count":17,"kev_count":17,"has_kev":18},"18.12.04",{"version":114,"cve_count":17,"kev_count":17,"has_kev":18},"18.12.05",{"version":116,"cve_count":17,"kev_count":17,"has_kev":18},"18.12.06",{"version":118,"cve_count":17,"kev_count":17,"has_kev":18},"18.12.07",{"version":120,"cve_count":17,"kev_count":17,"has_kev":18},"18.12.09",{"version":122,"cve_count":17,"kev_count":17,"has_kev":18},"18.12.10",{"version":124,"cve_count":17,"kev_count":17,"has_kev":18},"18.12.11",{"version":126,"cve_count":17,"kev_count":17,"has_kev":18},"18.12.12",{"version":128,"cve_count":17,"kev_count":17,"has_kev":18},"18.12.13",{"version":130,"cve_count":17,"kev_count":17,"has_kev":18},"18.12.14",{"version":132,"cve_count":17,"kev_count":17,"has_kev":18},"18.12.15",{"version":134,"cve_count":17,"kev_count":17,"has_kev":18},"18.12.16",{"version":136,"cve_count":17,"kev_count":17,"has_kev":18},"18.12.17",{"version":138,"cve_count":17,"kev_count":17,"has_kev":18},"18.12.19",{"version":140,"cve_count":17,"kev_count":17,"has_kev":18},"24.09.01",{"version":142,"cve_count":17,"kev_count":17,"has_kev":18},"24.09.02",{"version":144,"cve_count":17,"kev_count":17,"has_kev":18},"9.04",{"version":146,"cve_count":17,"kev_count":17,"has_kev":18},"9.04.01",{"version":148,"cve_count":17,"kev_count":17,"has_kev":18},"9.04.02","Ofbiz by Apache is a technology product with 64 tracked versions and 52 known security vulnerabilities including 3 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":16,"kev_count":17,"has_kev":18},{"version":22,"cve_count":23,"kev_count":17,"has_kev":18},{"version":25,"cve_count":26,"kev_count":17,"has_kev":18},{"version":28,"cve_count":29,"kev_count":17,"has_kev":18},{"version":31,"cve_count":11,"kev_count":17,"has_kev":18},{"version":33,"cve_count":11,"kev_count":17,"has_kev":18},{"version":35,"cve_count":23,"kev_count":17,"has_kev":18},{"version":37,"cve_count":17,"kev_count":17,"has_kev":18},{"version":39,"cve_count":23,"kev_count":17,"has_kev":18},{"version":41,"cve_count":42,"kev_count":17,"has_kev":18},{"version":44,"cve_count":26,"kev_count":17,"has_kev":18},{"version":46,"cve_count":11,"kev_count":17,"has_kev":18},{"version":48,"cve_count":11,"kev_count":17,"has_kev":18},{"version":50,"cve_count":23,"kev_count":17,"has_kev":18},{"version":52,"cve_count":23,"kev_count":17,"has_kev":18},{"version":54,"cve_count":23,"kev_count":17,"has_kev":18},{"version":56,"cve_count":42,"kev_count":17,"has_kev":18},{"version":58,"cve_count":29,"kev_count":17,"has_kev":18},{"version":60,"cve_count":29,"kev_count":17,"has_kev":18},{"version":62,"cve_count":11,"kev_count":17,"has_kev":18},{"version":64,"cve_count":11,"kev_count":17,"has_kev":18},{"version":66,"cve_count":23,"kev_count":17,"has_kev":18},{"version":68,"cve_count":23,"kev_count":17,"has_kev":18},{"version":70,"cve_count":11,"kev_count":17,"has_kev":18},{"version":72,"cve_count":11,"kev_count":17,"has_kev":18},{"version":74,"cve_count":23,"kev_count":17,"has_kev":18},{"version":76,"cve_count":16,"kev_count":17,"has_kev":18},{"version":78,"cve_count":16,"kev_count":17,"has_kev":18},{"version":80,"cve_count":16,"kev_count":17,"has_kev":18},{"version":82,"cve_count":17,"kev_count":17,"has_kev":18},{"version":84,"cve_count":17,"kev_count":17,"has_kev":18},{"version":86,"cve_count":17,"kev_count":17,"has_kev":18},{"version":88,"cve_count":17,"kev_count":17,"has_kev":18},{"version":90,"cve_count":23,"kev_count":17,"has_kev":18},{"version":92,"cve_count":16,"kev_count":17,"has_kev":18},{"version":94,"cve_count":17,"kev_count":17,"has_kev":18},{"version":96,"cve_count":17,"kev_count":17,"has_kev":18},{"version":98,"cve_count":17,"kev_count":17,"has_kev":18},{"version":100,"cve_count":17,"kev_count":17,"has_kev":18},{"version":102,"cve_count":17,"kev_count":17,"has_kev":18},{"version":104,"cve_count":17,"kev_count":17,"has_kev":18},{"version":106,"cve_count":17,"kev_count":17,"has_kev":18},{"version":108,"cve_count":17,"kev_count":17,"has_kev":18},{"version":110,"cve_count":17,"kev_count":17,"has_kev":18},{"version":112,"cve_count":17,"kev_count":17,"has_kev":18},{"version":114,"cve_count":17,"kev_count":17,"has_kev":18},{"version":116,"cve_count":17,"kev_count":17,"has_kev":18},{"version":118,"cve_count":17,"kev_count":17,"has_kev":18},{"version":120,"cve_count":17,"kev_count":17,"has_kev":18},{"version":122,"cve_count":17,"kev_count":17,"has_kev":18},{"version":124,"cve_count":17,"kev_count":17,"has_kev":18},{"version":126,"cve_count":17,"kev_count":17,"has_kev":18},{"version":128,"cve_count":17,"kev_count":17,"has_kev":18},{"version":130,"cve_count":17,"kev_count":17,"has_kev":18},{"version":132,"cve_count":17,"kev_count":17,"has_kev":18},{"version":134,"cve_count":17,"kev_count":17,"has_kev":18},{"version":136,"cve_count":17,"kev_count":17,"has_kev":18},{"version":138,"cve_count":17,"kev_count":17,"has_kev":18},{"version":140,"cve_count":17,"kev_count":17,"has_kev":18},{"version":142,"cve_count":17,"kev_count":17,"has_kev":18},{"version":144,"cve_count":17,"kev_count":17,"has_kev":18},{"version":146,"cve_count":17,"kev_count":17,"has_kev":18},{"version":148,"cve_count":17,"kev_count":17,"has_kev":18},[216,224,231,236,243,248,253,258,263,267],{"cveId":217,"description":218,"publishedDate":219,"cvssScore":220,"cvssVersion":221,"severity":222,"isKev":4,"epssScore":223},"CVE-2024-45195","Direct Request ('Forced Browsing') vulnerability in Apache OFBiz.\n\nThis issue affects Apache OFBiz: before 18.12.16.\n\nUsers are recommended to upgrade to version 18.12.16, which fixes the issue.","2024-09-04",7.5,"v3.1","High",0.99983,{"cveId":225,"description":226,"publishedDate":227,"cvssScore":228,"cvssVersion":221,"severity":229,"isKev":4,"epssScore":230},"CVE-2024-32113","Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz.This issue affects Apache OFBiz: before 18.12.13.\n\nUsers are recommended to upgrade to version 18.12.13, which fixes the issue.","2024-05-08",9.8,"Critical",0.99442,{"cveId":232,"description":233,"publishedDate":234,"cvssScore":228,"cvssVersion":221,"severity":229,"isKev":4,"epssScore":235},"CVE-2024-38856","Incorrect Authorization vulnerability in Apache OFBiz.\n\nThis issue affects Apache OFBiz: through 18.12.14.\n\nUsers are recommended to upgrade to version 18.12.15, which fixes the issue.\n\nUnauthenticated endpoints could allow execution of screen rendering code of screens if some preconditions are met (such as when the screen definitions don't explicitly check user's permissions because they rely on the configuration of their endpoints).","2024-08-05",0.99427,{"cveId":237,"description":238,"publishedDate":239,"cvssScore":240,"cvssVersion":221,"severity":241,"isKev":18,"epssScore":242},"CVE-2020-9496","XML-RPC request are vulnerable to unsafe deserialization and Cross-Site Scripting issues in Apache OFBiz 17.12.03","2020-07-15",6.1,"Medium",0.98926,{"cveId":244,"description":245,"publishedDate":246,"cvssScore":228,"cvssVersion":221,"severity":229,"isKev":18,"epssScore":247},"CVE-2021-26295","Apache OFBiz has unsafe deserialization prior to 17.12.06. An unauthenticated attacker can use this vulnerability to successfully take over Apache OFBiz.","2021-03-22",0.97969,{"cveId":249,"description":250,"publishedDate":251,"cvssScore":240,"cvssVersion":221,"severity":241,"isKev":18,"epssScore":252},"CVE-2020-1943","Data sent with contentId to \u002Fcontrol\u002Fstream is not sanitized, allowing XSS attacks in Apache OFBiz 16.11.01 to 16.11.07.","2020-04-01",0.97253,{"cveId":254,"description":255,"publishedDate":256,"cvssScore":228,"cvssVersion":221,"severity":229,"isKev":18,"epssScore":257},"CVE-2023-51467","The vulnerability permits attackers to circumvent authentication processes, enabling them to remotely execute arbitrary code\n\n","2023-12-26",0.96001,{"cveId":259,"description":260,"publishedDate":261,"cvssScore":228,"cvssVersion":221,"severity":229,"isKev":18,"epssScore":262},"CVE-2023-49070","Pre-auth RCE in Apache Ofbiz 18.12.09.\n\nIt's due to XML-RPC no longer maintained still present.\nThis issue affects Apache OFBiz: before 18.12.10. \nUsers are recommended to upgrade to version 18.12.10","2023-12-05",0.95442,{"cveId":264,"description":265,"publishedDate":219,"cvssScore":228,"cvssVersion":221,"severity":229,"isKev":18,"epssScore":266},"CVE-2024-45507","Server-Side Request Forgery (SSRF), Improper Control of Generation of Code ('Code Injection') vulnerability in Apache OFBiz.\n\nThis issue affects Apache OFBiz: before 18.12.16.\n\nUsers are recommended to upgrade to version 18.12.16, which fixes the issue.",0.93243,{"cveId":268,"description":269,"publishedDate":270,"cvssScore":228,"cvssVersion":221,"severity":229,"isKev":18,"epssScore":271},"CVE-2021-30128","Apache OFBiz has unsafe deserialization prior to 17.12.07 version","2021-04-27",0.81079,[273,278,282],{"cveId":217,"description":218,"publishedDate":219,"cvssScore":220,"severity":222,"isKev":4,"epssScore":223,"cisaVulnName":274,"cisaDateAdded":275,"cisaShortDescription":276,"cisaRequiredAction":277},"Apache OFBiz Forced Browsing Vulnerability","2025-02-04","Apache OFBiz contains a forced browsing vulnerability that allows a remote attacker to obtain unauthorized access.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":232,"description":233,"publishedDate":234,"cvssScore":228,"severity":229,"isKev":4,"epssScore":235,"cisaVulnName":279,"cisaDateAdded":280,"cisaShortDescription":281,"cisaRequiredAction":277},"Apache OFBiz Incorrect Authorization Vulnerability","2024-08-27","Apache OFBiz contains an incorrect authorization vulnerability that could allow remote code execution via a Groovy payload in the context of the OFBiz user process by an unauthenticated attacker.",{"cveId":225,"description":226,"publishedDate":227,"cvssScore":228,"severity":229,"isKev":4,"epssScore":230,"cisaVulnName":283,"cisaDateAdded":284,"cisaShortDescription":285,"cisaRequiredAction":277},"Apache OFBiz Path Traversal Vulnerability","2024-08-07","Apache OFBiz contains a path traversal vulnerability that could allow for remote code execution.",{"title":287,"metaDescription":288,"keywords":289,"structuredData":290},"Ofbiz by Apache - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Ofbiz by Apache covering 64 versions with 52 tracked vulnerabilities including 2 critical and 1 high-severity issues and 3 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Ofbiz vulnerabilities, Ofbiz security, Ofbiz CVE, Apache Ofbiz, Ofbiz threat intelligence, Apache security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Ofbiz KEV, Ofbiz exploited vulnerabilities",{"@context":291,"@type":292,"name":293,"description":288,"url":294,"manufacturer":295,"applicationCategory":299,"softwareVersion":300,"mainEntity":301},"https:\u002F\u002Fschema.org","SoftwareApplication","Ofbiz","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fapache\u002Fofbiz",{"@type":296,"name":297,"url":298},"Organization","Apache","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fapache","Security Software","64 versions tracked",{"@type":302,"name":303,"description":304,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Ofbiz Security Vulnerabilities","Security vulnerabilities affecting Ofbiz by Apache",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":306,"apiVersion":307},"2026-10-28T13:51:43.604Z","3.0",[],{"rows":310,"total":11,"capped":18,"failed":17},[311,316,321],{"cveId":217,"name":274,"severity":222,"cvss":220,"added":275,"epss":223,"published":312,"ranges":313,"checked":4,"hits":315,"covers":18},"2024-09-04T09:15:04.397",[314],"before 18.12.16",[],{"cveId":232,"name":279,"severity":229,"cvss":228,"added":280,"epss":235,"published":317,"ranges":318,"checked":4,"hits":320,"covers":18},"2024-08-05T09:15:56.78",[319],"before 18.12.15",[],{"cveId":225,"name":283,"severity":229,"cvss":228,"added":284,"epss":230,"published":322,"ranges":323,"checked":4,"hits":325,"covers":18},"2024-05-08T15:15:10.227",[324],"before 18.12.13",[]]