CVE Watch—

CVE-2024-45195

Apache OFBiz Forced Browsing Vulnerability

CVSS

—

No CVSS

EPSS

100.0%

p100

KEV

YES

Feb 4, 2025

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

100.0%EPSS · 30 days100.0%

2026-09-162026-10-14

KEV catalog record

Product

Apache / OFBiz

Vulnerability

Apache OFBiz Forced Browsing Vulnerability

Added to KEV

Feb 4, 2025

Remediate by

Feb 25, 2025

Known ransomware use

Summary description

Apache OFBiz contains a forced browsing vulnerability that allows a remote attacker to obtain unauthorized access.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes

This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://ofbiz.apache.org/security.html ; https://nvd.nist.gov/vuln/detail/CVE-2024-45195

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2024-32113—

100.0%

KEV—80Apache OFBiz Path Traversal Vulnerability—CVE-2024-38856—

99.9%

KEV—80Apache OFBiz Incorrect Authorization Vulnerability—