{"id":"CVE-2021-30128","published":"2021-04-27T19:50:14Z","modified":"2024-08-03T22:24:59Z","title":"Unsafe deserialization in Apache OFBiz","vendor":"Apache Software Foundation","product":"Apache OFBiz","tier":"core","eol":null,"affectedVersions":[{"vendor":"Apache Software Foundation","product":"Apache OFBiz","versions":[">= Apache OFBiz, < 17.12.07"]}],"description":{"text":"Apache OFBiz has unsafe deserialization prior to 17.12.07 version","provenance":"source","from":"CVE.org"},"summary":{"text":"Apache OFBiz contains an unsafe deserialization flaw in versions prior to 17.12.07, affecting the product's deserialization handling of untrusted data. The provided information does not specify the attack vector, required privileges, user interaction, or configuration conditions needed to exploit it, so an attacker's capabilities cannot be stated beyond the ability to abuse the unsafe deserialization.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:18:28Z"},"cvss":null,"epss":{"score":0.81209,"percentile":0.99634,"date":"2026-10-29","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2026-06-22","exploitedFirstSeen":"2026-06-22","ransomware":false,"evidence":[{"url":"https://previdian.com/CVE-2021-30128","date":"2026-06-22"}],"evidenceTotal":1,"provenance":"source"},"exploited":true,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[],"references":[{"url":"https://lists.apache.org/thread.html/rb3f5cd65f3ddce9b9eb4d6ea6e2919933f0f89b15953769d11003743%40%3Cdev.ofbiz.apache.org%3E","tags":["x_refsource_MISC"]},{"url":"https://lists.apache.org/thread.html/rb82f41de3c44bb644632531f79649046ca76afeab25a2bdb9991ab84%40%3Cnotifications.ofbiz.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.apache.org/thread.html/rbe512e5ccd6b11169c6379daa1234bc805f3d53c5a38224e956295ce%40%3Cnotifications.ofbiz.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"http://www.openwall.com/lists/oss-security/2021/04/27/5","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.apache.org/thread.html/rb3f5cd65f3ddce9b9eb4d6ea6e2919933f0f89b15953769d11003743%40%3Cuser.ofbiz.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.apache.org/thread.html/r108a964764b8bd21ebd32ccd4f51c183ee80a251c105b849154a8e9d%40%3Ccommits.ofbiz.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.apache.org/thread.html/rb3f5cd65f3ddce9b9eb4d6ea6e2919933f0f89b15953769d11003743%40%3Cannounce.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.apache.org/thread.html/rab718cfe6468085d7560c0c1ae816841e175886199f42e36efb8d735%40%3Cnotifications.ofbiz.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.apache.org/thread.html/r078351a876ed284ba667b33aba29428d7308a5bd4df78f14a3df6661%40%3Cnotifications.ofbiz.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.apache.org/thread.html/rbe8439b26a71fc3b429aa793c65dcc4a6e349bc7bb5010746a74fa1d%40%3Ccommits.ofbiz.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2021-17068","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-17068","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"pocGithub":{"count":1,"skipped":0,"earliest":"2021-04-29","earliestUrl":"https://github.com/LioTree/CVE-2021-30128-EXP","repos":[{"name":"LioTree/CVE-2021-30128-EXP","url":"https://github.com/LioTree/CVE-2021-30128-EXP","stars":22,"created":"2021-04-29"}]},"nuclei":[{"id":"CVE-2021-30128","name":"Apache OFBiz <17.12.07 - Arbitrary Code Execution","severity":"critical","path":"http/cves/2021/CVE-2021-30128.yaml","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-30128.yaml"}],"first":{"date":"2021-04-29","source":"PoC-in-GitHub","url":"https://github.com/LioTree/CVE-2021-30128-EXP"},"provenance":"source"},"exploitRefs":[],"flow":[],"timeline":[{"date":"2021-04-27","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2021-30128","provenance":"source"},{"date":"2021-04-29","kind":"exploit-public","label":"First public exploit: PoC-in-GitHub","url":"https://github.com/LioTree/CVE-2021-30128-EXP","provenance":"source"},{"date":"2026-06-22","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://previdian.com/CVE-2021-30128","provenance":"source"}],"speed":{"daysToPublicExploit":2,"firstExploitFrom":"PoC-in-GitHub","daysToKev":null},"priority":{"score":64.9,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":5.0,"detail":"added 129 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.93,"detail":"percentile 0.9963"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 PoC-in-GitHub repo; 1 nuclei template"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}