Sploitus

42 exploited vulnerabilities in Apache Ofbiz

Vulnerabilities with publicly known exploits

Vendors
Apache, Git, Eclipse
With known exploits
42
Affected Apache Ofbiz versions
< 18.12.17, 18.12.16, 18.12.15, 18.12.14, 18.12.13, 18.12.10, 17.12.07, 24.09.06, 24.09.02, 18.12.11, 17.12.06, 16.11.01, 16.11.02, 16.11.03, 18.12.12, 24.09.07, 17.12.01, 16.11.04, 24.09.03, 18.12.19, 17.12.03

Vulnerabilities with exploits

Highest CVSS first — 14 of these already have exploit code on Sploitus

CVE-2024-47208
CVSS 9.8 CRITICAL 2024-11-16FIX AVAILABLE
CVE-2024-45507 1 exploit
CVSS 9.8 CRITICAL 2024-08-14FIX AVAILABLE
CVE-2024-45195 1 exploit
CVSS 9.8 CRITICAL 2024-08-14FIX AVAILABLE
CVE-2024-38856 21 exploits
CVSS 9.8 CRITICAL 2024-08-04FIX AVAILABLE
CVE-2024-36104 5 exploits
CVSS 9.1 CRITICAL 2024-05-15FIX AVAILABLE
CVE-2024-32113 13 exploits
CVSS 9.8 CRITICAL 2024-05-08FIX AVAILABLE
CVE-2023-49070 17 exploits
CVSS 9.8 CRITICAL 2023-12-04FIX AVAILABLE
CVE-2021-30128 3 exploits
CVSS 10.0 HIGH 2021-04-27FIX AVAILABLE
CVE-2026-45434
CVSS 9.8 CRITICAL 2026-05-19FIX AVAILABLE
CVE-2025-54466
CVSS 9.8 CRITICAL 2025-08-05FIX AVAILABLE
CVE-2023-51467 24 exploits
CVSS 9.8 CRITICAL 2023-12-26FIX AVAILABLE
CVE-2021-29200 1 exploit
CVSS 9.8 CRITICAL 2021-04-27FIX AVAILABLE
CVE-2021-26295 14 exploits
CVSS 9.8 CRITICAL 2021-03-22FIX AVAILABLE
CVE-2017-15714
CVSS 9.8 CRITICAL 2018-01-04FIX AVAILABLE
CVE-2024-25065
CVSS 9.1 CRITICAL 2024-02-28FIX AVAILABLE
CVE-2026-41919
CVSS 9.1 CRITICAL 2026-05-19FIX AVAILABLE
CVE-2026-31986
CVSS 9.1 CRITICAL 2026-05-19FIX AVAILABLE
CVE-2024-48962
CVSS 8.9 HIGH 2024-11-16FIX AVAILABLE
CVE-2026-50223
CVSS 8.8 HIGH 2026-06-10FIX AVAILABLE
CVE-2026-47342
CVSS 8.8 HIGH 2026-06-10FIX AVAILABLE
CVE-2026-46586
CVSS 8.8 HIGH 2026-05-19FIX AVAILABLE
CVE-2019-0235 3 exploits
CVSS 8.8 HIGH 2020-04-30
CVE-2026-31910
CVSS 7.5 HIGH 2026-05-19FIX AVAILABLE
CVE-2026-31909
CVSS 7.5 HIGH 2026-05-19FIX AVAILABLE
CVE-2018-8033 1 exploit
CVSS 7.5 HIGH 2018-12-13
CVE-2026-29226
CVSS 7.3 HIGH 2026-05-19FIX AVAILABLE
CVE-2025-59118
CVSS 7.3 HIGH 2025-11-11FIX AVAILABLE
CVE-2026-45187
CVSS 6.5 MEDIUM 2026-05-19FIX AVAILABLE
CVE-2026-35086
CVSS 6.5 MEDIUM 2026-05-19FIX AVAILABLE
CVE-2026-31380
CVSS 6.5 MEDIUM 2026-05-19FIX AVAILABLE
CVE-2026-31378
CVSS 6.5 MEDIUM 2026-05-19FIX AVAILABLE
CVE-2026-29220
CVSS 6.5 MEDIUM 2026-05-19FIX AVAILABLE
CVE-2026-29207
CVSS 6.5 MEDIUM 2026-05-19FIX AVAILABLE
CVE-2025-61623
CVSS 6.5 MEDIUM 2025-11-11FIX AVAILABLE
CVE-2025-30676
CVSS 6.1 MEDIUM 2025-04-01FIX AVAILABLE
CVE-2026-31906
CVSS 6.1 MEDIUM 2026-05-19FIX AVAILABLE
CVE-2026-31379
CVSS 6.1 MEDIUM 2026-05-19FIX AVAILABLE
CVE-2020-9496 22 exploits
CVSS 6.1 MEDIUM 2020-07-15FIX AVAILABLE
CVE-2026-31388
CVSS 5.3 MEDIUM 2026-05-19FIX AVAILABLE
CVE-2026-31387
CVSS 5.3 MEDIUM 2026-05-19FIX AVAILABLE
CVE-2024-23946
CVSS 5.3 MEDIUM 2024-01-17FIX AVAILABLE
CVE-2025-26865 1 exploit
CVSS 3.5 LOW 2025-02-17