PT-2012-2793 · Tibco · Tibco Bpm+4
Published
2012-03-13
·
Updated
2012-03-14
·
CVE-2012-0688
CVSS v2.0
4.3
Medium
| Vector | AV:N/AC:M/Au:N/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
TIBCO ActiveMatrix Platform versions 3.1.3
TIBCO Silver Fabric ActiveMatrix Service Grid Distribution version 3.1.3
TIBCO Service Grid and Service Bus versions 3.x before 3.1.5
TIBCO BusinessWorks Service Engine versions 5.9.x before 5.9.3
TIBCO BPM versions prior to 1.3.0
Description
A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Recommendations
For TIBCO ActiveMatrix Platform version 3.1.3, update to a version later than 3.1.3.
For TIBCO Silver Fabric ActiveMatrix Service Grid Distribution version 3.1.3, update to a version later than 3.1.3.
For TIBCO Service Grid and Service Bus versions 3.x before 3.1.5, update to version 3.1.5 or later.
For TIBCO BusinessWorks Service Engine versions 5.9.x before 5.9.3, update to version 5.9.3 or later.
For TIBCO BPM versions prior to 1.3.0, update to version 1.3.0 or later.
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Tibco Activematrix Platform
Tibco Bpm
Tibco Businessworks Service Engine
Tibco Service Grid/Service Bus
Tibco Silver Fabric Activematrix Service Grid Distribution