medium4.3
CVE-2010-4497
Cross-site scripting (XSS) vulnerability in Collaborative Information Manager server, as used in TIBCO Collaborative Information Manager before 8.1.0 and Activ…
Impact
Cross-site scripting (XSS) vulnerability in Collaborative Information Manager server, as used in TIBCO Collaborative Information Manager before 8.1.0 and ActiveCatalog before 1.0.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tibco | Activecatalog | through 1.0 |
| Tibco | Collaborative Information Manager | through 8.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/70372
- http://secunia.com/advisories/42791
- http://www.securityfocus.com/bid/45691
- http://www.securitytracker.com/id?1024942
- http://www.tibco.com/multimedia/cim_advisory_20110105_tcm8-12765.txt
- http://www.tibco.com/services/support/advisories/cim-advisory_20100105.jsp
- http://www.vupen.com/english/advisories/2011/0037
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64521
- http://osvdb.org/70372
- http://secunia.com/advisories/42791
- http://www.securityfocus.com/bid/45691
- http://www.securitytracker.com/id?1024942
- http://www.tibco.com/multimedia/cim_advisory_20110105_tcm8-12765.txt
- http://www.tibco.com/services/support/advisories/cim-advisory_20100105.jsp
- http://www.vupen.com/english/advisories/2011/0037
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64521