CVE-2013-2137

Apache OFBiz 10.04.01-10.04.05, 11.04.01-11.04.02, 12.04.01 - Cross-Site Scripting in Webtools View Log Screen

Title source: llm
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in the "View Log" screen in the Webtools application in Apache Open For Business Project (aka OFBiz) 10.04.01 through 10.04.05, 11.04.01 through 11.04.02, and 12.04.01 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References (6)

Core 6
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/85874
Patch, Vendor Advisory x_refsource_confirm
http://ofbiz.apache.org/download.html#vulnerabilities
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/53910
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/61370
Broken Link mailing-list x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2013-07/0144.html
Broken Link vdb-entry x_refsource_osvdb
http://osvdb.org/95523

Scores

EPSS 0.0770
EPSS Percentile 93.9%

Details

CWE
CWE-79
Status published
Products (8)
apache/ofbiz 10.04.01
apache/ofbiz 10.04.02
apache/ofbiz 10.04.03
apache/ofbiz 10.04.04
apache/ofbiz 10.04.05
apache/ofbiz 11.04.01
apache/ofbiz 11.04.02
apache/ofbiz 12.04.01
Published Aug 15, 2013
Tracked Since Feb 18, 2026