CVEvulnerability
CVE-2010-4497
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-01-07
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in Collaborative Information Manager server, as used in TIBCO Collaborative Information Manager before 8.1.0 and ActiveCatalog before 1.0.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
• tibco activecatalog (<= 1.0)
• tibco collaborative information manager (<= 8.0)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://osvdb.org/70372 osvdb.org
- http://secunia.com/advisories/42791 Vendor Advisory
- http://www.securityfocus.com/bid/45691 www.securityfocus.com
- http://www.securitytracker.com/id?1024942 www.securitytracker.com
- http://www.tibco.com/multimedia/cim_advisory_20110105_tcm8-12765.txt Vendor Advisory
- http://www.tibco.com/services/support/advisories/cim-advisory_20100105.jsp Vendor Advisory
- http://www.vupen.com/english/advisories/2011/0037 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64521 exchange.xforce.ibmcloud.com
- http://osvdb.org/70372 osvdb.org
- http://secunia.com/advisories/42791 Vendor Advisory
- http://www.securityfocus.com/bid/45691 www.securityfocus.com
- http://www.securitytracker.com/id?1024942 www.securitytracker.com
- http://www.tibco.com/multimedia/cim_advisory_20110105_tcm8-12765.txt Vendor Advisory
- http://www.tibco.com/services/support/advisories/cim-advisory_20100105.jsp Vendor Advisory
- http://www.vupen.com/english/advisories/2011/0037 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64521 exchange.xforce.ibmcloud.com