Cross-site scripting (XSS) vulnerability in the "View Log" screen in the Webtools application in Apache Open For Business Project (aka OFBiz) 10.04.01 through 10.04.05, 11.04.01 through 11.04.02, and 12.04.01 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References
Link | Resource |
---|---|
http://archives.neohapsis.com/archives/bugtraq/2013-07/0144.html | Broken Link |
http://ofbiz.apache.org/download.html#vulnerabilities | Patch Vendor Advisory |
http://osvdb.org/95523 | Broken Link |
http://secunia.com/advisories/53910 | Third Party Advisory |
http://www.securityfocus.com/bid/61370 | Third Party Advisory VDB Entry |
https://exchange.xforce.ibmcloud.com/vulnerabilities/85874 | Third Party Advisory VDB Entry |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: redhat
Published: 2013-08-15T16:00:00
Updated: 2017-08-28T12:57:01
Reserved: 2013-02-19T00:00:00
Link: CVE-2013-2137
JSON object: View
NVD Information
Status : Analyzed
Published: 2013-08-15T16:55:09.317
Modified: 2018-05-18T12:17:30.460
Link: CVE-2013-2137
JSON object: View
Redhat Information
No data.
CWE