Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Apache OFBiz 24.09.07 Clear all filters
TI-2026-34917 CVE-2026-47342 · GHSA-7c94-45hg-hmp3

Apache OFBiz: Privilege Escalation via updateOrRemove Authorization Bypass

Priority MEDIUM 40

A privilege escalation vulnerability in Apache OFBiz allows a low-privileged authenticated user to obtain higher privileges This issue affects Apache OFBiz: before 24.09.07.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00407 Published 2026-06-10 Fixed in 24.09.07 CWE-285
TI-2026-36976 CVE-2026-50223 · GHSA-862q-5rrg-cc9p

Apache OFBiz: DataResource Low-Privileged Authenticated FreeMarker Template Injection Leads to Remote Code Execution

Priority MEDIUM 41

Improper Control of Generation of Code ('Code Injection') vulnerability in Apache OFBiz allows a low-privileged authenticated user with Content/DataResource editing privileges to perform template injection attacks that c…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00657 Published 2026-06-10 Fixed in 24.09.07 CWE-94