Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
apache ofbiz 12.04 vulnerabilities and exploits
(subscribe to this query)
710
VMScore
CVE-2016-6800
The default configuration of the Apache OFBiz framework offers a blog functionality. Different users are able to operate blogs which are related to specific parties. In the form field for the creation of new blog articles the user input of the summary field as well as the article...
Apache Ofbiz 11.04
Apache Ofbiz 11.04.01
Apache Ofbiz 11.04.02
Apache Ofbiz 11.04.03
Apache Ofbiz 11.04.04
Apache Ofbiz 11.04.05
Apache Ofbiz 11.04.06
Apache Ofbiz 12.04
Apache Ofbiz 12.04.01
Apache Ofbiz 12.04.02
Apache Ofbiz 12.04.03
Apache Ofbiz 12.04.04
980
VMScore
CVE-2016-4462
By manipulating the URL parameter externalLoginKey, a malicious, logged in user could pass valid Freemarker directives to the Template Engine that are reflected on the webpage; a specially crafted Freemarker template could be used for remote code execution. Mitigation: Upgrade to...
Apache Ofbiz 11.04
Apache Ofbiz 11.04.01
Apache Ofbiz 11.04.02
Apache Ofbiz 11.04.03
Apache Ofbiz 11.04.04
Apache Ofbiz 11.04.05
Apache Ofbiz 11.04.06
Apache Ofbiz 12.04
Apache Ofbiz 12.04.01
Apache Ofbiz 12.04.02
Apache Ofbiz 12.04.03
Apache Ofbiz 12.04.04
1000
VMScore
CVE-2016-2170
Apache OFBiz 12.04.x prior to 12.04.06 and 13.07.x prior to 13.07.03 allow remote malicious users to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.
Apache Ofbiz
Preferred Score:
VMScore
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
intel(r) me driver pack installer engines
avada | website builder for wordpress & woocommerce
CVE-2024-31858
intel(r) mlc software
rank math seo – ai seo tools to dominate seo rankings
template injection
CVE-2024-36280
CVE-2025-24016
information disclosure
CVE-2024-36274
CVE-2024-57605
injection
CVE-2025-24472
Home
/
Search Results
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started