Security Advisory
CVE-2016-2170
9.8
CRITICAL
Vulnerability Description
Apache OFBiz 12.04.x before 12.04.06 and 13.07.x before 13.07.03 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.
Published Date
April 12, 2016
Official Source
NIST NVD Advisory