medium6.3
CVE-2017-5536
The GridServer Broker, and GridServer Director components of TIBCO Software Inc.
Impact
The GridServer Broker, and GridServer Director components of TIBCO Software Inc. TIBCO DataSynapse GridServer Manager contain vulnerabilities which may allow an authenticated user to perform cross-site scripting (XSS). In addition, an authenticated user could be a victim of a cross-site request forgery (CSRF) attack. Affected releases include TIBCO Software Inc.'s TIBCO DataSynapse GridServer Manager: versions up to and including 5.1.3; 6.0.0; 6.0.1; 6.0.2; 6.1.0; 6.1.1; and 6.2.0.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tibco | Datasynapse Gridserver Manager | through 5.1.3 Versions 6.0.0, 6.0.1, 6.0.2, 6.1.0, 6.1.1 |