NVD Vulnerabilities

Severity Distribution

Publication Trend

Vulnerability Database

CVE ID Description Published Base Score Attack Vector Severity Actions
CVE-2026-83538 Missing Authorization in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote unauthenticated attacker to disclose internal business re... 2026-11-05 5.3 NETWORK MEDIUM NVD
CVE-2026-82960 Improper Control of Generation of Code ('Code Injection') in ModelFormField in the Apache OFBiz cms plugin before 24.09.08 on all platforms allows a r... 2026-11-05 8.8 NETWORK HIGH NVD
CVE-2026-82916 Missing Authorization in XmlDsDump in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote authenticated attacker holding only the webt... 2026-11-05 7.1 NETWORK HIGH NVD
CVE-2026-82912 Improper Neutralization of Special Elements Used in an Expression Language Statement ('Expression Language Injection') in EmailServices in Apache OFBi... 2026-11-05 8.8 NETWORK HIGH NVD
CVE-2026-82910 Improper Neutralization of Special Elements Used in a Template Engine ('Server-Side Template Injection') in MacroScreenRenderer in Apache OFBiz 24.09 ... 2026-11-05 8.8 NETWORK HIGH NVD
CVE-2026-82907 Authentication Bypass by Capture-replay in ExternalLoginKeysManager in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote unauthentic... 2026-11-05 9.8 NETWORK CRITICAL NVD
CVE-2026-82904 Uncontrolled Resource Consumption in ServiceMultiEventHandler in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote unauthenticated a... 2026-11-05 7.5 NETWORK HIGH NVD
CVE-2026-82902 Server-Side Request Forgery in ViewDataFile in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote authenticated attacker holding only... 2026-11-05 4.3 NETWORK MEDIUM NVD
CVE-2026-117691 A flaw was found in the SAML HTTP-Redirect binding implementation of Keycloak. The issue occurs because the server processes percent-encoded parameter... 2026-11-05 9.1 NETWORK CRITICAL NVD
CVE-2026-114277 Authentication bypass by Assumed-Immutable data vulnerability in Apache OFBiz. Apache OFBiz's optional Janrain Engage Social Login integration in the ... 2026-11-05 6.5 NETWORK MEDIUM NVD
CVE-2026-114272 Authorization Bypass Through User-Controlled Key in the content viewing component in Apache OFBiz 24.09 before 24.09.08 on all platforms allows an aut... 2026-11-05 6.5 NETWORK MEDIUM NVD
CVE-2026-114271 Authorization Bypass Through User-Controlled Key in the shopping list services in Apache OFBiz 24.09 before 24.09.08 on all platforms allows an authen... 2026-11-05 6.5 NETWORK MEDIUM NVD
CVE-2026-114235 Direct Request ('Forced Browsing') in the Order component in Apache OFBiz 24.09 before 24.09.08 on all platforms allows an authenticated user with onl... 2026-11-05 6.5 NETWORK MEDIUM NVD
CVE-2026-114233 Incorrect Privilege Assignment in the Order Manager in Apache OFBiz 24.09 before 24.09.08 on all platforms allows an authenticated user who holds only... 2026-11-05 8.1 NETWORK HIGH NVD
CVE-2026-114229 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in the Catalog image viewer in Apache OFBiz 24.09 before 24.09.08... 2026-11-05 6.1 NETWORK MEDIUM NVD