Hi, I have created this WIP wiki page to share my knowledge about OFBiz security and especially to warn users about the current Java unserialize vulnerability. Be sure to read at least the "Be safe" warning. https://cwiki.apache.org/confluence/display/OFBIZ/Keeping+OFBiz+secure HTH Jacques