CVEvulnerability
CVE-2013-2137
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-08-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the "View Log" screen in the Webtools application in Apache Open For Business Project (aka OFBiz) 10.04.01 through 10.04.05, 11.04.01 through 11.04.02, and 12.04.01 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
• apache ofbiz 10.04.01
• apache ofbiz 10.04.02
• apache ofbiz 10.04.03
• apache ofbiz 10.04.04
• apache ofbiz 10.04.05
• apache ofbiz 11.04.01
• apache ofbiz 11.04.02
• apache ofbiz 12.04.01
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://archives.neohapsis.com/archives/bugtraq/2013-07/0144.html Broken Link
- http://ofbiz.apache.org/download.html#vulnerabilities Patch, Vendor Advisory
- http://osvdb.org/95523 Broken Link
- http://secunia.com/advisories/53910 Third Party Advisory
- http://www.securityfocus.com/bid/61370 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/85874 Third Party Advisory, VDB Entry
- http://archives.neohapsis.com/archives/bugtraq/2013-07/0144.html Broken Link
- http://ofbiz.apache.org/download.html#vulnerabilities Patch, Vendor Advisory
- http://osvdb.org/95523 Broken Link
- http://secunia.com/advisories/53910 Third Party Advisory
- http://www.securityfocus.com/bid/61370 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/85874 Third Party Advisory, VDB Entry