OpenErp Java API uses defunct XMLRPC which has security vulnerabilities

[marcbatchelor-nucleus]

XMLRPC is an archived project at apache: https://ws.apache.org/
XMLRPC has multiple security vulnerabilities:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5002
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5003
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5004

Suggest moving to another library.

[flotho]

Hi @mbatchelor ,

Thanks for your tips. Do you suggest to move for another XMLRPC client library or to change the API? If you suggested the second option it's not possible, Odoo SA the editor of Odoo is responsible o the technical architecture choices and all its products have been developped based on XMLRPC, neither SOAP nor REST are available in a native way in Odoo.

[flotho]

@mbatchelor,

Ok I understand what you pointed.
BTW, what are the pentaho library you're recommanding, as we hope to be able to migrate the odoo step into the new api using your native xmlrpc library would be a great idea