CVEvulnerability
CVE-2010-4496
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-01-07
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in Collaborative Information Manager server, as used in TIBCO Collaborative Information Manager before 8.1.0 and ActiveCatalog before 1.0.1, allow remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected configurations
• tibco activecatalog (<= 1.0)
• tibco collaborative information manager (<= 8.0)
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://osvdb.org/70371 osvdb.org
- http://secunia.com/advisories/42791 Vendor Advisory
- http://www.securityfocus.com/bid/45691 www.securityfocus.com
- http://www.securitytracker.com/id?1024942 www.securitytracker.com
- http://www.tibco.com/multimedia/cim_advisory_20110105_tcm8-12765.txt Vendor Advisory
- http://www.tibco.com/services/support/advisories/cim-advisory_20100105.jsp Vendor Advisory
- http://www.vupen.com/english/advisories/2011/0037 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64520 exchange.xforce.ibmcloud.com
- http://osvdb.org/70371 osvdb.org
- http://secunia.com/advisories/42791 Vendor Advisory
- http://www.securityfocus.com/bid/45691 www.securityfocus.com
- http://www.securitytracker.com/id?1024942 www.securitytracker.com
- http://www.tibco.com/multimedia/cim_advisory_20110105_tcm8-12765.txt Vendor Advisory
- http://www.tibco.com/services/support/advisories/cim-advisory_20100105.jsp Vendor Advisory
- http://www.vupen.com/english/advisories/2011/0037 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64520 exchange.xforce.ibmcloud.com