Lucene search

MitreCVE-2010-4497

HistoryJan 07, 2011 - 7:00 p.m.

CVE-2010-4497

2011-01-0719:00:18

CWE-79

mitre

web.nvd.nist.gov

cve-2010-4497

cross-site scripting

xss

collaboration information manager

tibco

activecatalog

web security

remote code injection

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.003

Percentile

70.3%

JSON

Cross-site scripting (XSS) vulnerability in Collaborative Information Manager server, as used in TIBCO Collaborative Information Manager before 8.1.0 and ActiveCatalog before 1.0.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

Nvd

Node

tibcoactivecatalogRange≤1.0

tibcocollaborative_information_managerRange≤8.0

VendorProductVersionCPE
tibcoactivecatalog*cpe:2.3:a:tibco:activecatalog:*:*:*:*:*:*:*:*
tibcocollaborative_information_manager*cpe:2.3:a:tibco:collaborative_information_manager:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
tibco	activecatalog	*	cpe:2.3:a:tibco:activecatalog::::::::
tibco	collaborative_information_manager	*	cpe:2.3:a:tibco:collaborative_information_manager::::::::

References

osvdb.org/70372

secunia.com/advisories/42791

www.securityfocus.com/bid/45691

www.securitytracker.com/id?1024942

www.tibco.com/multimedia/cim_advisory_20110105_tcm8-12765.txt

www.tibco.com/services/support/advisories/cim-advisory_20100105.jsp

www.vupen.com/english/advisories/2011/0037

exchange.xforce.ibmcloud.com/vulnerabilities/64521

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.003

Percentile

70.3%

JSON

Related for CVE-2010-4497