CVE-2026-114229 | Apache OFBiz up to 24.09.07 Catalog image viewer cross site scripting

November 5, 2026 Yanac

A vulnerability classified as problematic was found in Apache OFBiz up to 24.09.07. The impacted element is an unknown function of the component Catalog image viewer. Such manipulation leads to cross site scripting.

This vulnerability is listed as CVE-2026-114229. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More