Class familyApache · OFBiz
Apache OFBiz path traversal flaws, 2022–2026
8 OFBiz CVEs with CWE-22 weaknesses, 2 Sep 2022 to 19 May 2026. 1 is in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
1 2022’22
1 2023’23
4 2024’24
2025’25
2 2026’26
In CISA KEVNot in KEV
20221 CVE
20231 CVE
20244 CVEs, 1 in KEV
20262 CVEs
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2022-25371 | 2 Sep 2022 | Unauth Path Traversal with file corruption affecting the Birt plugin of Apache OFBiz | Grouped by weakness | 18.5 |
| CVE-2022-47501 | 14 Apr 2023 | Apache OFBiz: Arbitrary file reading vulnerability | Grouped by weakness | 64.4 |
| CVE-2024-23946 | 28 Feb 2024 | Apache OFBiz: Path traversal or file inclusion | Grouped by weakness | 21.3 |
| CVE-2024-25065 | 28 Feb 2024 | Apache OFBiz: Path traversal allowing authentication bypass. | Grouped by weakness | 26.1 |
| CVE-2024-32113KEV | 8 May 2024 | Apache OFBiz Path Traversal Vulnerability | Grouped by weakness | 69.9 |
| CVE-2024-36104 | 4 Jun 2024 | Apache OFBiz: Path traversal leading to a RCE | Grouped by weakness | 66.3 |
| CVE-2026-29220 | 19 May 2026 | Apache OFBiz: Low-Privilege LFI in Content Component | Grouped by weakness | 15.1 |
| CVE-2026-31379 | 19 May 2026 | Apache OFBiz: Path Traversal and File Upload Validation Bypass Leading to Arbitrary File Write, Stored XSS and RCE in… | Grouped by weakness | 13.9 |