UpHeron
All vulnerabilities

Servers and applications

CVE-2025-26865

Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Apache OFBiz. This issue affects Apache OFBiz: from 18.12.17 before 18.12.18.   It's a regression between 18.12.17 and 18.12.18. In case you use something like that, which is not recommended! For security, only official releases should be used. In other words, if you use 18.12.17 you are still safe. The…

Severity
Low 3.5
Published
10 Mar 2025
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Apache OFBizServers and applications · cpe:a:apache:ofbiz
  • Version 18.12.17

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2025-26865
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-26865