CVE-2010-4497 Cross-site scripting (XSS) vulnerability in Collaborative Information Manager server, as used in TIBCO Collaborative Information Manager before 8.1.0 and ActiveCatalog before 1.0.1, allows remote atta...
MediumCVSS 4.3
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in Collaborative Information Manager server, as used in TIBCO Collaborative Information Manager before 8.1.0 and ActiveCatalog before 1.0.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tibco activecatalog | <= 1.0 | No fix listed |
| tibco collaborative information manager | <= 8.0 | No fix listed |
References
- 70372 vdb-entry
- 42791 third-party-advisory vendor-advisory
- 45691 vdb-entry
- 1024942 vdb-entry
- www.tibco.com vendor-advisory
- www.tibco.com vendor-advisory
- ADV-2011-0037 vdb-entry vendor-advisory
- tibco-unspecified-xss(64521) vdb-entry