CVE-2010-4496 Multiple SQL injection vulnerabilities in Collaborative Information Manager server, as used in TIBCO Collaborative Information Manager before 8.1.0 and ActiveCatalog before 1.0.1, allow remote attacke...
HighCVSS 7.5
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in Collaborative Information Manager server, as used in TIBCO Collaborative Information Manager before 8.1.0 and ActiveCatalog before 1.0.1, allow remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tibco activecatalog | <= 1.0 | No fix listed |
| tibco collaborative information manager | <= 8.0 | No fix listed |
References
- 70371 vdb-entry
- 42791 third-party-advisory vendor-advisory
- 45691 vdb-entry
- 1024942 vdb-entry
- www.tibco.com vendor-advisory
- www.tibco.com vendor-advisory
- ADV-2011-0037 vdb-entry vendor-advisory
- tibco-unspecified-sql-injection(64520) vdb-entry