exploit/linux/http/apache_ofbiz_deserialization

weaponized

Apache OFBiz XML-RPC Java Deserialization

view exploit source metasploittype exploitpublished 2020-07-13catalog metasploit

exploited CVEs (3)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2023-51467US	critical9.8	96.0% (100th)	Exploit	2023-12-26
The vulnerability permits attackers to circumvent authentication processes, enabling them to remotely execute arbitrary code
CVE-2023-49070US	critical9.8	95.4% (100th)	Exploit	2023-12-05
Pre-auth RCE in Apache Ofbiz 18.12.09. It's due to XML-RPC no longer maintained still present. This issue affects Apache OFBiz: before 18.12.10. Users are recommended to upgrade…
CVE-2020-9496US	medium6.1	98.9% (100th)	Exploit	2020-07-15
XML-RPC request are vulnerable to unsafe deserialization and Cross-Site Scripting issues in Apache OFBiz 17.12.03

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.