UpHeron
All vulnerabilities

Servers and applications

CVE-2021-29200

Apache OFBiz has unsafe deserialization prior to 17.12.07 version An unauthenticated user can perform an RCE attack

Severity
Critical 9.8
Published
27 Apr 2021
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
17.12.07
Sources
NVD

Affected software

SoftwareAffected versions
Apache OFBizServers and applications · cpe:a:apache:ofbiz
  • Every version before 17.12.07

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-29200
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-29200