Apache OFbiz Vulnerabilities
83 vulnerabilities related to Apache OFbiz
- PoC2026-01-08CVE-2011-3600: Apache OFBiz - XML External Entity Injection
- 2025-08-22Apache OFBiz StatsSinceStart 远程代码执行漏洞（CVE-2024-45507）
- 2025-08-22Apache OFBiz /partymgr/control/getJSONuiLabel 服务器端请求伪造漏洞（CVE-2023-50968）
- 2025-08-22Apache OFBiz StatsSinceStart 远程代码执行漏洞（CVE-2024-45507）
- 2025-08-22Apache OFBiz /partymgr/control/getJSONuiLabel 服务器端请求伪造漏洞（CVE-2023-50968）
- PoC2025-08-01CVE-2018-8033: Apache OFBiz - XML External Entity Injection
- PoC2025-08-01CVE-2020-1943: Apache OFBiz <=16.11.07 - Cross-Site Scripting
- PoC2025-08-01CVE-2020-9496: Apache OFBiz 17.12.03 - Cross-Site Scripting
- PoC2025-08-01CVE-2021-26295: Apache OFBiz <17.12.06 - Arbitrary Code Execution
- PoC2025-08-01CVE-2021-29200: Apache OFBiz < 17.12.07 - Arbitrary Code Execution
- PoC2025-08-01CVE-2021-30128: Apache OFBiz <17.12.07 - Arbitrary Code Execution
- PoC2025-08-01CVE-2022-47501: Apache OFBiz < 18.12.07 - Local File Inclusion
- PoC2025-08-01CVE-2023-49070: Apache OFBiz < 18.12.10 - Arbitrary Code Execution
- PoC2025-08-01CVE-2023-50968: Apache OFBiz < 18.12.11 - Server Side Request Forgery
- PoC2025-08-01CVE-2023-51467: Apache OFBiz < 18.12.11 - Remote Code Execution
- PoC2025-08-01CVE-2024-32113: Apache OFBiz Directory Traversal - Remote Code Execution
- PoC2025-08-01CVE-2024-36104: Apache OFBiz - Directory Traversal & Remote Code Execution
- PoC2025-08-01CVE-2024-38856: Apache OFBiz - Improper Authorization & Remote Code Execution
- PoC2025-08-01CVE-2024-45195: Apache OFBiz - Remote Code Execution
- PoC2025-08-01CVE-2024-45507: Apache OFBiz - Remote Code Execution
- PoC2025-08-01CVE-2018-8033: Apache OFBiz XXE
- PoC2025-08-01CVE-2020-9496: Apache OFBiz XML-RPC Java Deserialization
- PoC2025-08-01CVE-2021-29200: Apache OFBiz < 17.12.07 - Arbitrary Code Execution
- PoC2025-08-01CVE-2023-49070: Apache OFBiz < 18.12.10 - Arbitrary Code Execution
- PoC2025-08-01CVE-2024-38856: Apache OFBiz CVE-2024-38856 远程命令执行漏洞
- PoC2025-08-01ofbiz-default-password: Apache OfBiz Default Login
- PoC2025-08-01apache-ofbiz-log4j-rce-temp: Apache OFBiz Log4j JNDI RCE
- PoC2025-08-01apache-ofbiz-log4j-rce: Apache OFBiz Log4j JNDI RCE
- PoC2025-08-01apache-ofbiz-programexport-rce: Apache ofbiz programexport RCE
- PoC2025-08-01apache-ofbiz-CVE-2023-51467-xmlrpc-rce: Apache ofbiz CVE-2023-51467 xmlrpc RCE
- PoC2025-08-01ofbiz-default-login: Apache OfBiz Default Login
- 2025-05-30Apache OFBiz /webtools/control/forgotPassword;/ProgramExport 代码执行漏洞 （CVE-2024-32113）
- 2025-05-30Apache OFBiz /webtools/control/forgotPassword;/ProgramExport 代码执行漏洞 （CVE-2024-32113）
- 2025-02-14Apache OFBiz /solr/demo/./debug/dump 文件读取漏洞（CVE-2022-47501）
- 2025-02-14Apache OFBiz /solr/demo/./debug/dump 文件读取漏洞（CVE-2022-47501）
- 2024-11-18Apache OFBiz 服务器端请求伪造(SSRF)漏洞
- 2024-09-10Apache OFBiz /viewdatafile 代码执行漏洞（CVE-2024-45195）
- 2024-09-10Apache OFBiz /viewdatafile 代码执行漏洞（CVE-2024-45195）
- 2024-09-09Apache OFBiz 身份验证绕过漏洞 可导致远程代码执行
- 2024-09-09Apache OFBiz 远程代码执行漏洞
- 2024-08-14Apache OFBiz CVE-2024-38856 未授权代码执行漏洞
- 2024-08-14Apache OFBiz CVE-2024-25065 鉴权绕过漏洞 1
- 2024-08-14Apache OFBiz CVE-2024-32113 目录遍历漏洞
- 2024-08-14Apache OFBiz CVE-2024-32113 目录遍历漏洞
- 2024-08-14Apache OFBiz CVE-2024-25065 鉴权绕过漏洞 2
- 2024-08-06Apache OFbiz /ProgramExport 命令执行漏洞（CVE-2024-38856）
- 2024-08-06Apache OFBiz 远程代码执行漏洞
- 2024-08-06Apache OFbiz /ProgramExport 命令执行漏洞（CVE-2024-38856）
- 2024-08-05Apache OFBiz /webtools/control/main/ProgramExport 存在代码注入漏洞
- 2024-08-05Apache OFBiz 授权不当致代码执行漏洞 (CVE-2024-38856)
- 2024-06-18Apache OFBiz 路径遍历漏洞(CVE-2024-32113)
- 2024-06-14Apache OFBiz /webtools/control/forgotPassword/././ProgramExport 目录遍历致代码执行漏洞 (CVE-2024-36104)
- 2024-06-14Apache OFBiz /webtools/control/forgotPassword/././ProgramExport 目录遍历致代码执行漏洞 (CVE-2024-36104)
- 2024-06-13Apache OFBiz CVE-2024-36104 鉴权绕过漏洞
- 2024-06-05Apache OFBiz 存在远程代码执行漏洞
- 2024-06-04Apache OFBiz 代码执行漏洞（CVE-2024-36104）
- 2024-06-04Apache OFBiz /webtools/control/ProgramExport 存在路径遍历漏洞
- 2024-05-31Apache OFBiz 弱口令漏洞
- 2024-05-31Apache OFBiz CVE-2018-8033 XML外部实体注入漏洞
- 2024-05-09Apache OFBiz ProgramExport目录遍历致远程代码执行漏洞
- 2024-04-18Apache OFBiz CVE-2021-29200 不安全的反序列化漏洞
- 2024-04-11Apache OFBiz groovy 远程代码执行漏洞
- 2024-03-29Apache OFBiz groovy 远程代码执行漏洞
- 2024-03-21Apache OFBiz XMLRPC 不安全的反序列化漏洞
- 2024-03-21Apache OFBiz XMLRPC 不安全的反序列化漏洞
- 2024-03-07Apache OFBiz CVE-2023-50968 服务端请求伪造漏洞
- 2024-02-22Apache OFBiz createAnonContact 服务端模板注入漏洞
- 2024-01-25Apache OFBiz服务器端请求伪造漏洞(CVE-2023-50968)
- 2023-12-28Apache OFBiz webtools/control/ProgramExport 远程代码执行漏洞（CVE-2023-51467）
- 2023-12-28Apache Ofbiz /webtools/control/getJSONuiLabelArray/ 存在任意文件读取漏洞
- 2023-12-28Apache Ofbiz /webtools/control/ProgramExport 存在远程代码执行漏洞
- 2023-12-27Apache OFBiz webtools/control/ProgramExport 远程代码执行漏洞（CVE-2023-51467）
- 2023-12-27Apache OFBiz webtools/control/ProgramExport 远程代码执行漏洞（CVE-2023-51467）
- 2023-12-26Apache OFBiz 任意文件属性读取与SSRF漏洞
- 2023-12-21Apache OFBiz groovy 远程代码执行漏洞
- 2023-12-07Apache OFBiz webtools/control/xmlrpc 远程代码执行漏洞（CVE-2023-49070）
- 2023-12-07Apache OFBiz webtools/control/xmlrpc 远程代码执行漏洞（CVE-2023-49070）
- 2023-12-06Apache OFBiz 未授权远程代码执行漏洞 (CVE-2023-49070)
- 2022-01-06Apache OfBiz 默认密码登录
- 2021-03-24Apache OFBiz RMI反序列化前台命令执行(CVE-2021-26295)
- 2021-01-19Apache ofbiz xml-rpc页面反序列漏洞
- 2021-01-19Apache OFBiz xmlrpc页面-XXE漏洞(CVE-2018-8033)
- 2013-08-16Apache OFBiz Nested Expression 远程代码执行漏洞