OF
ERP
OFBiz
by Apache · last CVE Jun 10, 2026
On CISA KEVExploited in the wild
76
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 24High 19Medium 22Low 1
Watch

Add OFBiz to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-26865
3.5
1%
Mar 10
Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Apache OFBiz
Affected: 18.12.17
Showing 1