Vulnerabilities in OFBiz

1 result
CVE-2011-3600—The /webtools/control/xmlrpc endpoint in OFBiz XML-RPC event handler is exposed to External Entity Injection by passing DOCTYPE declarationsEPSS 15.9%