CVE-2020-9496: Apache OFBiz

Medium severity, CVSS 6.1. EPSS: 98.9% chance of exploitation in the next 30 days.

XML-RPC request are vulnerable to unsafe deserialization and Cross-Site Scripting issues in Apache OFBiz 17.12.03

Affected products

• Apache OFBiz: version 17.12.03 only

Published 2020-07-15. Last modified 2026-06-17.