Vulnerability Database

318,206

Total vulnerabilities in the database

CVE-2013-2137

Cross-site scripting (XSS) vulnerability in the "View Log" screen in the Webtools application in Apache Open For Business Project (aka OFBiz) 10.04.01 through 10.04.05, 11.04.01 through 11.04.02, and 12.04.01 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • Published: Aug 15, 2013
  • Updated: Nov 9, 2025
  • CVE: CVE-2013-2137
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:M/Au:N/C:P/I:N/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
apache / ofbiz 12.04.01 12.04.01.x
apache / ofbiz 11.04.01 11.04.01.x
apache / ofbiz 11.04.02 11.04.02.x
apache / ofbiz 10.04.01 10.04.01.x
apache / ofbiz 10.04.02 10.04.02.x
apache / ofbiz 10.04.03 10.04.03.x
apache / ofbiz 10.04.04 10.04.04.x
apache / ofbiz 10.04.05 10.04.05.x