| Reporter | Title | Published | Views | Family All 16 |
|---|---|---|---|---|
 | CVE-2021-36163 | 7 Sep 202110:15 | – | attackerkb |
 | CVE-2021-36163 | 28 Jan 202404:14 | – | circl |
 | Apache Dubbo code issues and vulnerabilities | 7 Sep 202100:00 | – | cnnvd |
 | CVE-2021-36163 Unsafe deserialization in providers using the Hessian protocol | 7 Sep 202109:25 | – | cvelist |
 | EUVD-2021-2042 | 7 Oct 202500:30 | – | euvd |
 | Hessian protocol configuration vulnerability in Apache Dubbo | 8 Sep 202120:14 | – | github |
 | CVE-2021-36163 | 7 Sep 202109:25 | – | mend |
 | CVE-2021-36163 | 7 Sep 202110:15 | – | nvd |
 | GHSA-CPX9-4RWV-486V Hessian protocol configuration vulnerability in Apache Dubbo | 8 Sep 202120:14 | – | osv_ghsa |
 | Design/Logic Flaw | 7 Sep 202110:15 | – | prion |
10
[
{
"product": "Apache Dubbo",
"vendor": "Apache Software Foundation",
"versions": [
{
"lessThanOrEqual": "2.7.12",
"status": "affected",
"version": "Apache Dubbo 2.7.x",
"versionType": "custom"
},
{
"lessThanOrEqual": "2.6.10",
"status": "affected",
"version": "Apache Dubbo 2.6.x",
"versionType": "custom"
}
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| Hessian body | request body | / | Apache Dubbo's Hessian protocol implementation fails to apply allowed/blocked type lists to HessianSkeleton, allowing for arbitrary object deserialization via the generic service. | CWE-502 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 03:58Current
9.3Critical risk
Vulners AI Score9.3
CVSS 27.5
CVSS 3.19.8
EPSS0.03253