VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Sep 2, 2022· Updated Jun 17, 2026

CVE-2022-29063

CVE-2022-29063

Description

The Solr plugin of Apache OFBiz is configured by default to automatically make a RMI request on localhost, port 1099. In version 18.12.05 and earlier, by hosting a malicious RMI server on localhost, an attacker may exploit this behavior, at server start-up or on a server restart, in order to run arbitrary code. Upgrade to at least 18.12.06 or apply patches at https://issues.apache.org/jira/browse/OFBIZ-12646.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Apache/Ofbiz3 versions
    cpe:2.3:a:apache:ofbiz:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:apache:ofbiz:*:*:*:*:*:*:*:*range: <18.12.06
    • (no CPE)range: <=18.12.05
    • (no CPE)range: Apache OFBiz

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.