Sploitus

CVE-2020-9496

14 known exploits for CVE-2020-9496

XML-RPC request are vulnerable to unsafe deserialization and Cross-Site Scripting issues in Apache OFBiz 17.12.03

Affected products
Apache Ofbiz
Apache Ofbiz
= 17.12.03
Fix
Available
CVSS 3.1
6.1 MEDIUM
EPSS
98.9% (100th percentile)
Weakness
CWE-502, CWE-79
NVD status
Modified
Published
2020-07-15
CVE-2020-9496 at NVD
Authoritative description, scoring and affected products

14 known exploits for CVE-2020-9496

Proof-of-concept code and exploit modules indexed by Sploitus

Exploit for Improper Restriction of XML External Entity Reference in Apache Solr
2021-08-16 CreamGITEE
ApacheOfBiz 17.12.01 - Remote Command Execution via Unsafe Deserialization of XMLRPC arguments
2021-08-04 Adrián DíazZDT
ApacheOfBiz 17.12.01 - Remote Command Execution (RCE)
2021-08-04 Adrián DíazEXPLOITDB
Apache OfBiz 17.12.01 Remote Command Execution
2021-08-04 Alvaro MunozPACKETSTORM
Exploit for Deserialization of Untrusted Data in Apache Ofbiz
2021-08-04 s4dbrdGITHUB
Exploit for Deserialization of Untrusted Data in Apache Ofbiz
2021-06-06 ambalabanovGITHUB
Exploit for Deserialization of Untrusted Data in Apache Ofbiz
2021-05-13 yuaneuroGITHUB
Exploit for Deserialization of Untrusted Data in Apache Ofbiz
2021-05-07 cyber-nizGITHUB
Exploit for Deserialization of Untrusted Data in Apache Ofbiz
2021-04-30 g33xterGITHUB
Apache OFBiz XML-RPC Java Deserialization Exploit
2021-03-13 metasploitZDTRuby
Apache OFBiz XML-RPC Java Deserialization
2021-03-12 Alvaro MunozPACKETSTORMRuby
Apache OFBiz XML-RPC Java Deserialization Exploit
2020-08-18 metasploitZDTRuby
Apache OFBiz XML-RPC Java Deserialization
2020-08-17 Alvaro MunozPACKETSTORMRuby
Exploit for Deserialization of Untrusted Data in Apache Ofbiz
2020-08-15 dwisiswant0GITHUB