Known Vulnerabilities in OFBiz




Stored XSS in Apache OFBiz03 Apr, 2025
Low Patched
Multiple vulnerabilities in Apache OFBiz21 Nov, 2024
High Patched
Multiple vulnerabilities in Apache OFBiz03 Sep, 2024
High Patched Exploited
Remote code execution in Apache OFBiz06 Aug, 2024
High Patched Public exploit Exploited
Path traversal in Apache OFBiz14 Jun, 2024
High Patched Public exploit Exploited
Path traversal in Apache OFBiz05 Jun, 2024
High Patched
Path traversal in Apache OFBiz01 Mar, 2024
Medium Patched
Information disclosure in Apache OFBiz23 Feb, 2024
Medium Patched
Multiple SSRF vulnerabilities in Apache OFBiz27 Dec, 2023
Critical Patched Public exploit Exploited
Remote code execution in Apache Ofbiz05 Dec, 2023
High Patched Public exploit
Arbitrary file read in Apache OFBiz10 Apr, 2023
Medium Patched
Multiple vulnerabilities in Apache OfBiz10 Apr, 2023
High Patched
Remote code execution in OFBiz (Apache Log4j component)16 Dec, 2021
Critical Patched Exploited
Remote code execution in Apache OFBiz28 Apr, 2021
High Patched Public exploit
Remote code execution in Apache OFBiz21 Mar, 2021
High Patched Public exploit
Cross-site scripting in OFBiz15 Jul, 2020
Low Patched Public exploit
Input validation error in OFBiz15 Jul, 2020
Medium Patched
Multiple vulnerabilities in Apache OFBiz04 May, 2020
Medium Patched Public exploit
XSS in Apache OFBiz08 Mar, 2020
Low Patched
Information disclosure in Apache OFBiz10 Feb, 2020
Medium Patched