[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fXofcN0E1i2vd4Oc12wwdWep06EgUeD3KhBx1BMNrlHs":3,"g5a-risk:CVE-2024-45195":131},{"success":4,"data":5,"meta":128},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":26,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":49,"references":50,"referencesCount":78,"weaknesses":79,"weaknessesCount":49,"isActivelyExploited":4,"cisaInfo":88,"otxData":26,"relatedBlogPosts":90,"seoMetadata":91,"configurations":116,"relatedVendorCves":126,"notableEvents":127},"CVE-2024-45195","What is CVE-2024-45195?","Direct Request ('Forced Browsing') vulnerability in Apache OFBiz.\n\nThis issue affects Apache OFBiz: before 18.12.16.\n\nUsers are recommended to upgrade to version 18.12.16, which fixes the issue.","Direct Request ('Forced Browsing') vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.16. Users are recommended to upgrade to versi...","2024-09-04T09:15:04.397","2026-06-17T07:53:46.637",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":37,"CVSSMetricV2":38,"CVSSMetricV40":39},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":36},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":33,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":34,"BaseSeverity":35,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",9.8,"CRITICAL",5.9,[],[],[],0.99983,[40,40,40,40,40,40,40],"High",[44],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"apache","ofbiz","*","cpe:2.3:a:apache:ofbiz:*:*:*:*:*:*:*:*",1,[51,57,60,64,67,72],{"url":52,"source":53,"tags":54},"https:\u002F\u002Fissues.apache.org\u002Fjira\u002Fbrowse\u002FOFBIZ-13130","Apache",[55,56],"Issue Tracking","Vendor Advisory",{"url":58,"source":53,"tags":59},"https:\u002F\u002Flists.apache.org\u002Fthread\u002Fo90dd9lbk1hh3t2557t2y2qvrh92p7wy",[56],{"url":61,"source":53,"tags":62},"https:\u002F\u002Fofbiz.apache.org\u002Fdownload.html",[63],"Product",{"url":65,"source":53,"tags":66},"https:\u002F\u002Fofbiz.apache.org\u002Fsecurity.html",[56],{"url":68,"source":69,"tags":70},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2024\u002F09\u002F03\u002F6","Openwall",[71],"Mailing List",{"url":73,"source":74,"tags":75},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2024-45195","CISA",[76,77],"Third Party Advisory","US Government Resource",6,[80],{"id":81,"name":82,"description":83,"extendedDescription":84,"status":85,"abstraction":86,"structure":87},"CWE-425","Direct Request ('Forced Browsing')","The web application does not adequately enforce appropriate authorization on all restricted URLs, scripts, or files.","Web applications susceptible to direct request attacks often make the false assumption that such resources can only be reached through a given navigation path and so only apply authorization at certain points in the path.","Incomplete","Base","Simple",{"shortDescription":89,"requiredAction":89,"vulnerabilityName":89,"dateAdded":26},"",[],{"title":92,"metaDescription":93,"keywords":94,"canonicalUrl":95,"structuredData":96},"What is CVE-2024-45195? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2024-45195, a high severity cyber security vulnerability from 2024. High exploit probability (100.0%). Direct Request ('Forced ...","CVE-2024-45195, CVE-2024-45195 vulnerability, CVE-2024-45195 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, apache security, ofbiz vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2024-45195",{"@context":97,"@type":98,"headline":92,"description":93,"datePublished":10,"dateModified":11,"author":99,"publisher":103,"about":107,"mainEntityOfPage":111,"articleSection":114,"keywords":115},"https:\u002F\u002Fschema.org","TechArticle",{"@type":100,"name":101,"url":102},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":100,"name":101,"url":102,"logo":104},{"@type":105,"url":106},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":108,"name":6,"description":109,"additionalType":110},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":112,"@id":113},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2024-45195","Cybersecurity","CVE-2024-45195, CVE-2024-45195 vulnerability, CVE-2024-45195 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[117],{"Operator":26,"Negate":26,"Nodes":118},[119],{"Operator":120,"Negate":121,"CPEMatch":122},"OR",false,[123],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":124,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":125,"VersionEndIncluding":26},"51868E3D-516B-4DF1-8889-161D53E47ACE","18.12.16",[],[],{"lastModified":11,"cacheTime":129,"version":130},1793200390421,"2.0",{"score":132,"band":133,"action":134,"scoredAt":135},89,"Critical","Emergency patch","2026-10-28T07:03:44.295512+00:00"]