CVE-2012-0688 — Cross-site Scripting in Activematrix BPM

CWE-79 — Cross-site Scripting3 documents3 sources
Severity
4.3MEDIUMNVD
EPSS
0.2%
top 51.88%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Tibco Activematrix BPMTibco Activematrix Businessworks Service EngineTibco Activematrix Service BUS+2 more
Timeline
PublishedMar 13
Latest updateMay 17

Description

Cross-site scripting (XSS) vulnerability in TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3, Service Grid and Service Bus 3.x before 3.1.5, BusinessWorks Service Engine 5.9.x before 5.9.3, and BPM before 1.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages5 packages

▶NVDtibco/activematrix_service_bus3.0.0, 3.0.1+1

🔴Vulnerability Details

2
GHSA
GHSA-w238-vr25-vr5w: Cross-site scripting (XSS) vulnerability in TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3↗2022-05-17
▶
CVEList
CVE-2012-0688: Cross-site scripting (XSS) vulnerability in TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3↗2012-03-13
▶
CVE-2012-0688 — Cross-site Scripting | cvebase