XSS in Tibco Activematrix Bpm
CVE-2012-0688
Cross-site scripting (XSS) vulnerability in TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3, Service Grid and Service Bus 3.x before 3.1.5, BusinessWorks Service Engine 5.9.x before 5.9.3, and BPM before 1.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.009 (56.7th percentile) — read the EPSS interpretation.
Affected products
- Tibco Activematrix_bpm — versions 1.0.1, 1.0.2, 1.1.0
- Tibco Activematrix_businessworks_service_engine — versions 5.9.0, 5.9.1, 5.9.2
- Tibco Activematrix_service_bus — versions 3.0.0, 3.0.1
- Tibco Activematrix_service_grid — versions 3.0.0, 3.0.1, 3.1.0
- Tibco Silver_fabric_activematrix_service_grid_distribution — versions 3.1.3
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)