Apache Ofbiz vulnerabilities

4 vulnerabilities

Known vulnerabilities in Apache Ofbiz, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1CVE-2020-1943apacheapache ofbiz+1
EPSS score
97.31%
Data sent with contentId to /control/stream is not sanitized, allowing XSS attacks in Apache OFBiz 16.11.01 to 16.11.07.8.8CVE-2019-0235apacheapache ofbiz+1
EPSS score
32.75%
Apache OFBiz 17.12.01 is vulnerable to some CSRF attacks.7.5CVE-2019-12425apacheapache ofbiz+1
EPSS score
4.78%
Apache OFBiz 17.12.01 is vulnerable to Host header injection by accepting arbitrary host5.3CVE-2019-12426apacheapache ofbiz+1
EPSS score
4.89%
an unauthenticated user could get access to information of some backend screens by invoking setSessionLocale in Apache OFBiz 16.11.01 to 16.11.06