It's far from what you are looking for, but as a 1st step you may be interested by
https://issues.apache.org/jira/browse/OFBIZ-1525Jacques
From: "Ritika Agrawal" <
[hidden email]>
> Hello Users,
>
> Is there any list of security standards that OFBiz followed ? If not then
> can any one please tell me what security standards OFBiz followed ?
>
> Thanks,
>