OF
ERP
OFBiz
by Apache · last CVE Jun 10, 2026
On CISA KEVExploited in the wild
76
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 24High 19Medium 22Low 1
Watch

Add OFBiz to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-26865
3.5
1%
Mar 10
Apache OFBiz: Server-Side Template Injection affecting the ecommerce plugin leading to possible RCE
Affected: 18.12.17 before 18.12.18
Showing 1