AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2022-25371

CRITICAL · CVSS 9.8 EPSS 4.06% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-09-02 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
remote code execution code execution

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2022-25371
Severity
CRITICAL
CVSS
9.8
EPSS
4.06%
Apache GitHub

Original NVD Description

Apache OFBiz uses the Birt project plugin (https://eclipse.github.io/birt-website/) to create data visualizations and reports. By leveraging a bug in Birt (https://bugs.eclipse.org/bugs/show_bug.cgi?id=538142) it is possible to perform a remote code execution (RCE) attack in Apache OFBiz, release 18.12.05 and earlier.