PT-2012-2793 · Tibco · Tibco Bpm+4

Publicado 2012-03-13 · Atualizado 2012-03-14 · CVE-2012-0688

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions TIBCO ActiveMatrix Platform versions 3.1.3 TIBCO Silver Fabric ActiveMatrix Service Grid Distribution version 3.1.3 TIBCO Service Grid and Service Bus versions 3.x before 3.1.5 TIBCO BusinessWorks Service Engine versions 5.9.x before 5.9.3 TIBCO BPM versions prior to 1.3.0

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Recommendations For TIBCO ActiveMatrix Platform version 3.1.3, update to a version later than 3.1.3. For TIBCO Silver Fabric ActiveMatrix Service Grid Distribution version 3.1.3, update to a version later than 3.1.3. For TIBCO Service Grid and Service Bus versions 3.x before 3.1.5, update to version 3.1.5 or later. For TIBCO BusinessWorks Service Engine versions 5.9.x before 5.9.3, update to version 5.9.3 or later. For TIBCO BPM versions prior to 1.3.0, update to version 1.3.0 or later.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2012-0688

Produtos afetados

Tibco Activematrix Platform

Tibco Bpm

Tibco Businessworks Service Engine

Tibco Service Grid/Service Bus

Tibco Silver Fabric Activematrix Service Grid Distribution

Referências · 3

• http://tibco.com/services/support/advisories/amx-be-spotfire-advisory_20120308.jsp · Aviso do Fabricante
• http://tibco.com/multimedia/activematrix3_advisory_20120308_tcm8-15728.txt · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2012-0688 · Nota de Segurança