CVEvulnerability
CVE-2011-1414
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-03-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the tibbr web server, as used in TIBCO tibbr 1.0.0 through 1.5.0 and tibbr Service 1.0.0 through 1.5.0, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
• tibco tibbr 1.0.0
• tibco tibbr 1.0.1
• tibco tibbr 1.5.0
• tibco tibbr service 1.0.0
• tibco tibbr service 1.0.1
• tibco tibbr service 1.5.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/43765 Vendor Advisory
- http://securitytracker.com/id?1025220 securitytracker.com
- http://www.osvdb.org/71178 www.osvdb.org
- http://www.securityfocus.com/bid/46891 www.securityfocus.com
- http://www.tibco.com/multimedia/tibbr_advisory_20110315_tcm8-13474.txt Vendor Advisory
- http://www.tibco.com/services/support/advisories/tibbr-tibbr-service-advisory_20110315.jsp Vendor Advisory
- http://www.vupen.com/english/advisories/2011/0687 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66113 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/43765 Vendor Advisory
- http://securitytracker.com/id?1025220 securitytracker.com
- http://www.osvdb.org/71178 www.osvdb.org
- http://www.securityfocus.com/bid/46891 www.securityfocus.com
- http://www.tibco.com/multimedia/tibbr_advisory_20110315_tcm8-13474.txt Vendor Advisory
- http://www.tibco.com/services/support/advisories/tibbr-tibbr-service-advisory_20110315.jsp Vendor Advisory
- http://www.vupen.com/english/advisories/2011/0687 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66113 exchange.xforce.ibmcloud.com