NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2023-51467

CVSS 3.1: 9.8 critical
EPSS: 96%p100
Published: Dec 26, 2023 · Dec 26, 2023
Modified: Jun 17, 2026

Analyze CVE-2023-51467 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

The vulnerability permits attackers to circumvent authentication processes, enabling them to remotely execute arbitrary code

Vendors: apache

Products: ofbiz

Weakness: CWE-918

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (96.0%)

In the news

6 stories

New Zero-Day Flaw in Apache OFBiz ERP Allows Remote Code Execution

The Hacker NewsAug 9, 05:12 UTC · Aug 9, 2024Exploit / PoCExploitedCVE-2024-38856 CVE-2024-36104 CVE-2024-32113+15 · 2 reads

60

Researchers warn of a new critical Apache OFBiz flaw

Security AffairsAug 5, 16:42 UTC · Aug 5, 2024Exploit / PoCExploitedCVE-2024-38856 CVE-2024-32113 CVE-2023-514675 · 2 reads

60

New PoC Exploit for Apache OfBiz Vulnerability Poses Risk to ERP Systems

The Hacker NewsJan 15, 00:00 UTC · Jan 15, 2024Exploit / PoCExploitedCVE-2023-51467 CVE-2023-49070 CVE-2020-9496+23

60

Experts created a PoC for Apache OFBiz flaw CVE-2023

Security AffairsJan 12, 12:07 UTC · Jan 12, 2024Exploit / PoCCVE-2023-51467 CVE-2023-49070 CVE-2020-9496+14 · 1 read

60

Critical Zero-Day in Apache OfBiz ERP System Exposes Businesses to Attack

The Hacker NewsJan 9, 06:04 UTC · Jan 9, 2024Exploit / PoCExploitedCVE-2023-51467 CVE-2023-490703

60

Experts warn of critical Zero

Security AffairsDec 28, 08:52 UTC · Dec 28, 2023Exploit / PoCCVE-2023-51467 CVE-2023-490702 · 1 read

60