CVE-2011-2020 Cross-site scripting (XSS) vulnerability in TIBCO iProcess Engine before 11.1.3 and iProcess Workspace before 11.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vect...
MediumCVSS 4.3
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in TIBCO iProcess Engine before 11.1.3 and iProcess Workspace before 11.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tibco iprocess engine | <= 11.1.2 | No fix listed |
| tibco iprocess engine | = 10.3.0 | No fix listed |
| tibco iprocess engine | = 10.3.1 | No fix listed |
| tibco iprocess engine | = 10.3.2 | No fix listed |
| tibco iprocess engine | = 10.3.3 | No fix listed |
| tibco iprocess engine | = 10.3.4 | No fix listed |
| tibco iprocess engine | = 10.3.5 | No fix listed |
| tibco iprocess engine | = 10.4 | No fix listed |
| tibco iprocess engine | = 10.4.1 | No fix listed |
| tibco iprocess engine | = 10.5 | No fix listed |
| tibco iprocess engine | = 10.6 | No fix listed |
| tibco iprocess engine | = 10.6.0 | No fix listed |
| tibco iprocess engine | = 10.6.1 | No fix listed |
| tibco iprocess engine | = 10.6.2 | No fix listed |
| tibco iprocess engine | = 11.0 | No fix listed |
| tibco iprocess engine | = 11.1.1 | No fix listed |
| tibco iprocess workspace | <= 11.3 | No fix listed |
| tibco iprocess workspace | = 11.0 | No fix listed |
| tibco iprocess workspace | = 11.1 | No fix listed |
| tibco iprocess workspace | = 11.2 | No fix listed |
References
- 72553 vdb-entry
- 44639 third-party-advisory vendor-advisory
- 47921 vdb-entry
- www.tibco.com vendor-advisory
- www.tibco.com vendor-advisory
- ADV-2011-1272 vdb-entry vendor-advisory
- iprocess-unspecified-xss(67537) vdb-entry