Not rated
CVE-2021-30128 Apache OFBiz has unsafe deserialization prior to 17.12.07 version
Description
Apache OFBiz has unsafe deserialization prior to 17.12.07 version
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache OFBiz 17.12 | earliest → < 17.12.07 | 17.12.07 |
Other CVEs of Apache OFBiz
The 97 CVEs of Apache OFBiz →
CVE-2026-66903
Apache OFBiz: Authenticated Path Traversal in Catalog Image Management
Not rated
CVE-2026-71901
Apache OFBiz: Dispatch arbitrary internal services on SFA component
Not rated
CVE-2026-68524
Apache OFBiz: Pre-Authentication Remote Code Execution via Attacker-Controlled Screen Definition Loading
Not rated
CVE-2026-73577
Apache OFBiz: Unauthenticated path-suffix view authorization bypass
Not rated