{"api_version":"v1","generated_at":"2026-10-08T12:50:00+00:00","product":{"cve_count":48,"evidence_gap_note":"This identity is present in BlackTree CVE records, but no product-specific publisher support or retirement history is currently registered in Lifecycle.","id":"security:cve-apache-software-foundation-apache-ofbiz-1c05e713ef52","lifecycle_state":"evidence_gap","linked_lifecycle_url":null,"name":"Apache OFBiz","next_cursor":null,"observations":[{"affected":"< 24.09.07","affected_versions_present":true,"cve_id":"CVE-2026-47342","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-47342","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-12T12:44:44.347Z","patch_url":"","primary_source":"","published":"2026-06-10T22:29:06.793Z"},{"affected":"< 24.09.07","affected_versions_present":true,"cve_id":"CVE-2026-50223","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-50223","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-12T03:55:27.599Z","patch_url":"","primary_source":"","published":"2026-06-10T22:23:49.650Z"},{"affected":"< 24.09.06","affected_versions_present":true,"cve_id":"CVE-2026-46586","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-46586","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-20T15:33:41.602Z","patch_url":"","primary_source":"","published":"2026-05-19T09:41:39.546Z"},{"affected":"< 24.09.06","affected_versions_present":true,"cve_id":"CVE-2026-45434","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-45434","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-20T15:34:15.862Z","patch_url":"","primary_source":"","published":"2026-05-19T09:40:26.892Z"},{"affected":"< 24.09.06","affected_versions_present":true,"cve_id":"CVE-2026-45187","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-45187","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-19T18:37:23.236Z","patch_url":"","primary_source":"","published":"2026-05-19T09:39:27.294Z"},{"affected":"< 24.09.06","affected_versions_present":true,"cve_id":"CVE-2026-41919","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-41919","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-19T18:37:22.296Z","patch_url":"","primary_source":"","published":"2026-05-19T09:36:55.524Z"},{"affected":"< 24.09.06","affected_versions_present":true,"cve_id":"CVE-2026-35086","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-35086","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-20T03:55:19.849Z","patch_url":"","primary_source":"","published":"2026-05-19T09:36:00.229Z"},{"affected":"< 24.09.06","affected_versions_present":true,"cve_id":"CVE-2026-31986","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-31986","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-19T18:37:20.230Z","patch_url":"","primary_source":"","published":"2026-05-19T09:34:38.426Z"},{"affected":"< 24.09.06","affected_versions_present":true,"cve_id":"CVE-2026-31910","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-31910","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-19T18:37:19.274Z","patch_url":"","primary_source":"","published":"2026-05-19T09:33:38.681Z"},{"affected":"< 24.09.06","affected_versions_present":true,"cve_id":"CVE-2026-31909","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-31909","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-19T18:37:18.308Z","patch_url":"","primary_source":"","published":"2026-05-19T09:32:47.268Z"},{"affected":"< 24.09.06","affected_versions_present":true,"cve_id":"CVE-2026-31906","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-31906","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-19T18:37:17.349Z","patch_url":"","primary_source":"","published":"2026-05-19T09:30:19.719Z"},{"affected":"< 24.09.06","affected_versions_present":true,"cve_id":"CVE-2026-31388","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-31388","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-19T18:37:16.419Z","patch_url":"","primary_source":"","published":"2026-05-19T09:28:29.273Z"},{"affected":"< 24.09.06","affected_versions_present":true,"cve_id":"CVE-2026-31387","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-31387","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-19T18:37:15.451Z","patch_url":"","primary_source":"","published":"2026-05-19T09:27:05.898Z"},{"affected":"< 24.09.06","affected_versions_present":true,"cve_id":"CVE-2026-31380","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-31380","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-19T18:37:14.491Z","patch_url":"","primary_source":"","published":"2026-05-19T09:24:39.139Z"},{"affected":"< 24.09.06","affected_versions_present":true,"cve_id":"CVE-2026-31379","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-31379","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-19T18:37:13.441Z","patch_url":"","primary_source":"","published":"2026-05-19T09:22:49.222Z"},{"affected":"< 24.09.06","affected_versions_present":true,"cve_id":"CVE-2026-31378","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-31378","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-19T18:37:12.423Z","patch_url":"","primary_source":"","published":"2026-05-19T09:21:18.503Z"},{"affected":"< 24.09.06","affected_versions_present":true,"cve_id":"CVE-2026-29226","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-29226","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-19T18:37:11.474Z","patch_url":"","primary_source":"","published":"2026-05-19T09:19:30.626Z"},{"affected":"< 24.09.06","affected_versions_present":true,"cve_id":"CVE-2026-29207","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-29207","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-19T18:37:09.452Z","patch_url":"","primary_source":"","published":"2026-05-19T09:18:18.681Z"},{"affected":"< 24.09.06","affected_versions_present":true,"cve_id":"CVE-2026-29220","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-29220","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-19T18:37:10.485Z","patch_url":"","primary_source":"","published":"2026-05-19T09:16:59.872Z"},{"affected":"< 24.09.03","affected_versions_present":true,"cve_id":"CVE-2025-61623","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-61623","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-11-12T14:29:43.400Z","patch_url":"","primary_source":"","published":"2025-11-12T09:16:58.139Z"},{"affected":"< 24.09.03","affected_versions_present":true,"cve_id":"CVE-2025-59118","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-59118","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-11-12T14:31:48.367Z","patch_url":"","primary_source":"","published":"2025-11-12T09:15:54.263Z"},{"affected":"< 24.09.02","affected_versions_present":true,"cve_id":"CVE-2025-54466","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-54466","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-02-26T17:48:32.591Z","patch_url":"https://issues.apache.org/jira/browse/OFBIZ-13276","primary_source":"","published":"2025-08-15T14:13:52.584Z"},{"affected":"< 18.12.19","affected_versions_present":true,"cve_id":"CVE-2025-30676","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-30676","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-04-02T22:03:27.945Z","patch_url":"https://ofbiz.apache.org/security.html","primary_source":"","published":"2025-04-01T14:43:49.721Z"},{"affected":"18.12.17 < 18.12.18","affected_versions_present":true,"cve_id":"CVE-2025-26865","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-26865","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-03-11T19:26:51.972Z","patch_url":"https://issues.apache.org/jira/browse/OFBIZ-12594","primary_source":"","published":"2025-03-10T14:01:06.952Z"},{"affected":"< 18.12.17","affected_versions_present":true,"cve_id":"CVE-2024-47208","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-47208","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-11-19T14:59:02.765Z","patch_url":"","primary_source":"","published":"2024-11-18T08:43:17.743Z"},{"affected":"< 18.12.17","affected_versions_present":true,"cve_id":"CVE-2024-48962","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-48962","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-04T14:55:28.249Z","patch_url":"","primary_source":"","published":"2024-11-18T08:41:30.545Z"},{"affected":"< 18.12.16","affected_versions_present":true,"cve_id":"CVE-2024-45507","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-45507","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-09-13T03:55:20.597Z","patch_url":"https://ofbiz.apache.org/security.html","primary_source":"","published":"2024-09-04T08:08:33.876Z"},{"affected":"< 18.12.14","affected_versions_present":true,"cve_id":"CVE-2024-36104","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-36104","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-02-13T17:52:36.097Z","patch_url":"","primary_source":"","published":"2024-06-04T07:25:07.746Z"},{"affected":"< 18.12.12","affected_versions_present":true,"cve_id":"CVE-2024-23946","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-23946","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-02-13T17:40:01.762Z","patch_url":"https://ofbiz.apache.org/download.html","primary_source":"","published":"2024-02-28T15:44:41.714Z"},{"affected":"< 18.12.12","affected_versions_present":true,"cve_id":"CVE-2024-25065","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-25065","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-02-13T17:40:46.357Z","patch_url":"","primary_source":"","published":"2024-02-28T15:42:50.448Z"},{"affected":"< 18.12.11","affected_versions_present":true,"cve_id":"CVE-2023-51467","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-51467","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-19T07:48:14.509Z","patch_url":"https://issues.apache.org/jira/browse/OFBIZ-12873","primary_source":"","published":"2023-12-26T14:46:59.800Z"},{"affected":"\u2264 18.12.10","affected_versions_present":true,"cve_id":"CVE-2023-50968","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-50968","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-02-13T17:19:42.335Z","patch_url":"https://issues.apache.org/jira/browse/OFBIZ-12875","primary_source":"","published":"2023-12-26T11:45:55.393Z"},{"affected":"< 18.12.10","affected_versions_present":true,"cve_id":"CVE-2023-49070","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-49070","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-02-13T17:18:28.237Z","patch_url":"https://issues.apache.org/jira/browse/OFBIZ-12812","primary_source":"","published":"2023-12-05T08:05:06.966Z"},{"affected":"< 18.12.09","affected_versions_present":true,"cve_id":"CVE-2023-46819","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-46819","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-09-04T19:09:30.869Z","patch_url":"https://ofbiz.apache.org/security.html","primary_source":"","published":"2023-11-07T11:02:03.305Z"},{"affected":"18.12.06 < 18.12.07","affected_versions_present":true,"cve_id":"CVE-2022-47501","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-47501","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-02-13T16:34:00.709Z","patch_url":"","primary_source":"","published":"2023-04-14T15:01:31.987Z"},{"affected":"Apache OFBiz \u2264 18.12.05","affected_versions_present":true,"cve_id":"CVE-2022-29158","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-29158","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-03T06:10:59.432Z","patch_url":"https://lists.apache.org/thread/7k92rg1o4ql2yw3o0vttkcl2jhq7j928","primary_source":"","published":"2022-09-02T07:10:20.000Z"},{"affected":"Apache OFBiz \u2264 18.12.05","affected_versions_present":true,"cve_id":"CVE-2022-29063","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-29063","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-03T06:10:59.274Z","patch_url":"https://lists.apache.org/thread/ytzrjc16pf357zntwk8tjby13kbx9105","primary_source":"","published":"2022-09-02T07:10:19.000Z"},{"affected":"Apache OFBiz \u2264 18.12.05","affected_versions_present":true,"cve_id":"CVE-2022-25813","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-25813","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-03T04:49:43.983Z","patch_url":"https://lists.apache.org/thread/vmj5s0qb59t0lvzf3vol3z1sc3sgyb2b","primary_source":"","published":"2022-09-02T07:10:18.000Z"},{"affected":"Apache OFBiz \u2264 18.12.05","affected_versions_present":true,"cve_id":"CVE-2022-25371","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-25371","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-11-20T15:11:11.129Z","patch_url":"https://lists.apache.org/thread/bvp3sczqq863lxr1wh7wjvdtjbkcwspq","primary_source":"","published":"2022-09-02T07:10:17.000Z"},{"affected":"Apache OFBiz \u2264 18.12.05","affected_versions_present":true,"cve_id":"CVE-2022-25370","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-25370","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-03T04:36:06.924Z","patch_url":"","primary_source":"","published":"2022-09-02T07:10:16.000Z"},{"affected":"unspecified \u2264 17.12.07","affected_versions_present":true,"cve_id":"CVE-2021-37608","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-37608","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-04T01:23:01.228Z","patch_url":"https://ofbiz.apache.org/security.html","primary_source":"","published":"2021-08-18T07:50:12.000Z"},{"affected":"Apache OFBiz < 17.12.07","affected_versions_present":true,"cve_id":"CVE-2021-30128","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-30128","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-03T22:24:59.428Z","patch_url":"http://www.openwall.com/lists/oss-security/2021/04/27/5","primary_source":"","published":"2021-04-27T19:50:14.000Z"},{"affected":"Apache OFBiz < 17.12.07","affected_versions_present":true,"cve_id":"CVE-2021-29200","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-29200","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-03T22:02:50.505Z","patch_url":"http://www.openwall.com/lists/oss-security/2021/04/27/4","primary_source":"","published":"2021-04-27T19:50:13.000Z"},{"affected":"Apache OFBiz 17.12.01 to 17.12.05","affected_versions_present":true,"cve_id":"CVE-2021-26295","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-26295","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-02-13T16:27:51.958Z","patch_url":"https://lists.apache.org/thread.html/r3c1802eaf34aa78a61b4e8e044c214bc94accbd28a11f3a276586a31%40%3Cuser.ofbiz.apache.org%3E","primary_source":"","published":"2021-03-22T12:00:18.000Z"},{"affected":"Apache OFBiz 16.11.01 to 16.11.04","affected_versions_present":true,"cve_id":"CVE-2018-8033","cve_url":"https://cve.blacktree.nl/cve/CVE-2018-8033","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-05T06:46:11.540Z","patch_url":"","primary_source":"","published":"2018-12-13T14:00:00.000Z"},{"affected":"16.11.01 to 16.11.03","affected_versions_present":true,"cve_id":"CVE-2017-15714","cve_url":"https://cve.blacktree.nl/cve/CVE-2017-15714","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-09-16T22:31:04.561Z","patch_url":"","primary_source":"","published":"2018-01-04T15:00:00.000Z"},{"affected":"13.07.*; 12.04.*; 11.04.*","affected_versions_present":true,"cve_id":"CVE-2016-6800","cve_url":"https://cve.blacktree.nl/cve/CVE-2016-6800","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-09-16T16:34:06.607Z","patch_url":"https://s.apache.org/Owsz","primary_source":"","published":"2017-08-30T17:00:00.000Z"},{"affected":"13.07.*; 12.04.*; 11.04.*","affected_versions_present":true,"cve_id":"CVE-2016-4462","cve_url":"https://cve.blacktree.nl/cve/CVE-2016-4462","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-09-17T00:30:36.308Z","patch_url":"","primary_source":"","published":"2017-08-30T17:00:00.000Z"}],"source_generated_at":"2026-10-08T06:18:52.353Z","vendor":"Apache Software Foundation"}}