Login Request a demo
OF
ERP
OFBiz
by Apache · last CVE Jun 10, 2026
On CISA KEVExploited in the wild
76
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities76In the news0Timeline
Severity mix
Critical 24High 19Medium 22Low 1
Severity
All severities76Critical24High19Medium22Low1
Exploitation
On CISA KEV3Exploited in the wild3
Watch

Add OFBiz to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-38856
In wildKEV
9.8
99%
Aug 5
Apache OFBiz: Unauthenticated endpoint could allow execution of screen rendering code
Affected: through 18.12.14
CVE-2024-32113
In wildKEV
9.8
100%
May 8
Apache OFBiz: Path traversal leading to RCE
Affected: before 18.12.13
Showing 2