CVE-2020-9496 XML-RPC request are vulnerable to unsafe deserialization and Cross-Site Scripting issues in Apache OFBiz 17.12.03

Description

XML-RPC request are vulnerable to unsafe deserialization and Cross-Site Scripting issues in Apache OFBiz 17.12.03

Affected products and versions

Product	Affected versions	Fixed in
Apache OFBiz	Versions not published

Other CVEs of Apache OFBiz

The 2 CVEs of Apache OFBiz →

CVE-2020-13923 IDOR vulnerability in the order processing feature from ecommerce component of Apache OFBiz before 17.12.04 Not rated