CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

Showing 1–3 of 3 records

CVE Vendor Product Added Due Status
CVE-2024-45195 — Apache OFBiz Forced Browsing Vulnerability
Apache OFBiz contains a forced browsing vulnerability that allows a remote attacker to obtain unauthorized access.
 Apache OFBiz Feb 4, 2025 Feb 25, 2025
CVE-2024-38856 — Apache OFBiz Incorrect Authorization Vulnerability
Apache OFBiz contains an incorrect authorization vulnerability that could allow remote code execution via a Groovy payload in the context of the OFBiz user process by an unauthenticated attacker.
 Apache OFBiz Aug 27, 2024 Sep 17, 2024
CVE-2024-32113 — Apache OFBiz Path Traversal Vulnerability
Apache OFBiz contains a path traversal vulnerability that could allow for remote code execution.
 Apache OFBiz Aug 7, 2024 Aug 28, 2024