Apache OFBiz XML-RPC Java Deserialization Vulnerability CVE-2020-9496 Scanner
Details
Stay Up To Date
Follow @secforeveryoneAsset Type
DOMAIN,IP,URL
Need Membership
Yes
Asset Verify
Yes
API Support
Yes
Estimate Time (Second)
30
Apache OFBiz XML-RPC Java Deserialization Vulnerability CVE-2020-9496 Scanner Detail
There is a vulnerability in Apache OFBiz with version 17.12.03. Attacker uses deserialization on XML-RPC request and Cross-Site Scripting.
Some Advice for Common Problems
Apache solved this vulnerability. Patch your Apache OFBiz to eliminate the vulnerability.
