CVE-2013-2137: Cross-site scripting (XSS) vulnerability in the "View Log" screen in the Webtools application in Apache Ope...

Security readout for executives and security teams

This is a cross-site scripting issue in Apache OFBiz Webtools' View Log screen. An attacker could cause script or HTML to run in a user's browser when logs are viewed. Business impact depends on who can reach Webtools and whether privileged users use it. The bundle does not provide CVSS, confirmed exploitation, or fixed-version details. Exposure is most likely where affected Apache OFBiz Webtools interfaces are reachable by users or networks outside trusted administration paths. Public internet exposure would raise concern, but the bundle does not state authentication requirements or default exposure. Treat as a targeted administrative web-application risk. It is not supported here as actively exploited or critical, but affected, exposed, or unsupported OFBiz installations should be remediated promptly because admin-session compromise could have broader business impact. Mitigation focus: Inventory Apache OFBiz deployments and identify versions in the affected ranges.; Check Apache OFBiz vulnerability guidance for supported fixed releases or vendor remediation.; Restrict Webtools access to trusted administrators and trusted networks..

Prepared

Jun 14, 2026, 21:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.