Vulnerability Database

318,206

Total vulnerabilities in the database

CVE-2013-2250

Apache Open For Business Project (aka OFBiz) 10.04.01 through 10.04.05, 11.04.01 through 11.04.02, and 12.04.01 allows remote attackers to execute arbitrary Unified Expression Language (UEL) functions via JUEL metacharacters in unspecified parameters, related to nested expressions.

  • Published: Aug 15, 2013
  • Updated: Nov 9, 2025
  • CVE: CVE-2013-2250
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 10
  • AV:N/AC:L/Au:N/C:C/I:C/A:C

CWEs:

Software From Fixed in
apache / ofbiz 12.04.01 12.04.01.x
apache / ofbiz 11.04.01 11.04.01.x
apache / ofbiz 11.04.02 11.04.02.x
apache / ofbiz 10.04.01 10.04.01.x
apache / ofbiz 10.04.02 10.04.02.x
apache / ofbiz 10.04.03 10.04.03.x
apache / ofbiz 10.04.04 10.04.04.x
apache / ofbiz 10.04.05 10.04.05.x