Dashboard / CVE-2026-105325

CVE-2026-105325

INFO Priority: 0.00 BB Relevance: 0/100
Published: 2026-11-05 Modified: 2026-11-06 First seen: 2026-11-05 Status: pending_score

Description

Missing check for  ACCOUNTING_UPDATE /  ACCOUNTING_CREATE in accounting in allows user with only ACCOUNTING_VIEW permission to update/create PaymentApplication. Affected versions before : 24.09.08 Users are recommended to upgrade to version 24.09.08 which fixes this issue.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
Apache Software Foundation Apache OFBiz 0 < 24.09.08

References & Advisories (1)

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

0.15%
Raw Score 0.001500
Percentile 4.2%
Date 2026-11-07

EPSS Trend

2026-11-07
0.00150
2026-11-06
0.00150

Intelligence Sources

mitre ref →
nvd ref →

External Links