CyberSec.Space Logo
Back to CVE Browser

CVE-2024-45195

🔥 Known Exploited (CISA KEV)HIGH
7.5
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2024-09-04
Last Modified2026-06-17
Data SourcesNVDCISA KEV

Vulnerability Description

Direct Request ('Forced Browsing') vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.16. Users are recommended to upgrade to version 18.12.16, which fixes the issue.

Affected Platforms (CPE)

📦
Apache

Ofbiz

< 18.12.16

References & Advisories

🔗 https://issues.apache.org/jira/browse/OFBIZ-13130
🔗 https://lists.apache.org/thread/o90dd9lbk1hh3t2557t2y2qvrh92p7wy
🔗 https://ofbiz.apache.org/download.html
🔗 https://ofbiz.apache.org/security.html
🔗 http://www.openwall.com/lists/oss-security/2024/09/03/6
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-45195

Related Vulnerabilities

CVE-2026-502238.8

Improper Control of Generation of Code ('Code Injection') vulnerability in Apache OFBiz allows a low-privileged authenticated user...

CVE-2026-473428.8

A privilege escalation vulnerability in Apache OFBiz allows a low-privileged authenticated user to obtain higher privileges Thi...

CVE-2025-616236.5

Reflected cross-site scripting vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 24.09.03. Users are recomm...

CVE-2025-591187.3

Unrestricted Upload of File with Dangerous Type vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 24.09.03. ...