PUBLISHED
2026-05-19 10:16
MODIFIED
2026-05-19 10:16
EPSS (Prob. Exploit)
0.59%
Top 52.4%
> DESCRIPTION
Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability in Apache OFBiz.
This issue affects Apache OFBiz: before 24.09.06.
Users are recommended to upgrade to version 24.09.06, which fixes the issue.
> AFFECTED_PRODUCTS
ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.
> CWE DETAILED DESCRIPTIONS
CWE-90: Improper Neutralization of Special Elements used in an LDAP Query - The product constructs all or part of an LDAP query using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended LDAP query when it is sent to a downstream component.
> HISTORIQUE DES MODIFICATIONS
Première apparition
19/05/2026 10:16
Source: NVD
📊
ENRICHISSEMENT
01/11/2026 06:59
CWE
Champ modifié: Description CWE
Ancienne valeur:
CWE-90: Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') - The product constructs all or part of an LDAP query using externally-influenced input from an upstream co...
Nouvelle valeur:
CWE-90: Improper Neutralization of Special Elements used in an LDAP Query - The product constructs all or part of an LDAP query using externally-influenced input from an upstream component, but it doe...
📊
ENRICHISSEMENT
01/06/2026 06:01
CWE
Champ modifié: Description CWE
Nouvelle valeur:
CWE-90: Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') - The product constructs all or part of an LDAP query using externally-influenced input from an upstream co...
Total des modifications: 2
Dernière mise à jour: 6 days ago