Dashboard / CVE-2026-45434

CVE-2026-45434

INFO Priority: 0.00 BB Relevance: 4/100
Published: 2026-05-19 Modified: 2026-11-03 First seen: 2026-11-03 Status: pending_score

Description

Improper Authentication vulnerability in Apache OFBiz via Password-Change Logic Flaw Leading to Remote Code Execution This issue affects Apache OFBiz: before 24.09.06. Users are recommended to upgrade to version 24.09.06, which fixes the issue.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
Apache Software Foundation Apache OFBiz 0 < 24.09.06

References & Advisories (1)

Bug Bounty Relevance

4 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

21.26%
Raw Score 0.212640
Percentile 97.6%
Date 2026-11-07

EPSS Trend

2026-11-07
0.21264
2026-11-06
0.21264
2026-11-05
0.21264
2026-11-04
0.21264
2026-11-03
0.21264

Intelligence Sources

mitre ref →

External Links