OFBiz
Security incidents tagged OFBiz. Newest first.
0 OFBiz incidents in the last 12 months
Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore
- Incidents
- 2
- Live
- 0
- Patched
- 2
- Days without an incident
- 786
- Longest quiet run: 786 days (Aug 28–Oct 22)
Show 2 older incidents2 older incidents
August 2024 1
PatchedApache OFBiz Incorrect Authorization
Apache OFBiz
Apache OFBiz contains an incorrect authorization vulnerability that could allow remote code execution via a Groovy payload in the context of the OFBiz user process by an unauthenticated attacker. Added to the CISA KEV catalog on 2024-08-27.
Open incident →CVE-2024-38856
May 2024 1
PatchedApache OFBiz Path Traversal
Apache OFBiz
Apache OFBiz contains a path traversal vulnerability that could allow for remote code execution. Added to the CISA KEV catalog on 2024-08-07.
Open incident →CVE-2024-32113
