NetSight
IP …
medium6.1Public exploit code

CVE-2020-9496

XML-RPC request are vulnerable to unsafe deserialization and Cross-Site Scripting issues in Apache OFBiz 17.12.03

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

XML-RPC request are vulnerable to unsafe deserialization and Cross-Site Scripting issues in Apache OFBiz 17.12.03

Affected products

VendorProductAffected versions
ApacheOfbiz
Version 17.12.03

Weakness classification

CWE-79CWE-502

References