CVE-2010-4496

Multiple SQL injection vulnerabilities in Collaborative Information Manager server, as used in TIBCO Collaborative Information Manager before 8.1.0 and ActiveCatalog before 1.0.1, allow remote attackers to execute arbitrary SQL commands via unspecified vectors.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 73%
VendorProductVersion
tibcoactivecatalog
𝑥
≤ 1.0
tibcocollaborative_information_manager
𝑥
≤ 8.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://osvdb.org/70371
http://secunia.com/advisories/42791
http://www.securityfocus.com/bid/45691
http://www.securitytracker.com/id?1024942
http://www.tibco.com/multimedia/cim_advisory_20110105_tcm8-12765.txt
http://www.tibco.com/services/support/advisories/cim-advisory_20100105.jsp
http://www.vupen.com/english/advisories/2011/0037
https://exchange.xforce.ibmcloud.com/vulnerabilities/64520
http://osvdb.org/70371
http://secunia.com/advisories/42791
http://www.securityfocus.com/bid/45691
http://www.securitytracker.com/id?1024942
http://www.tibco.com/multimedia/cim_advisory_20110105_tcm8-12765.txt
http://www.tibco.com/services/support/advisories/cim-advisory_20100105.jsp
http://www.vupen.com/english/advisories/2011/0037
https://exchange.xforce.ibmcloud.com/vulnerabilities/64520