CVE-2011-1414

Cross-site scripting (XSS) vulnerability in the tibbr web server, as used in TIBCO tibbr 1.0.0 through 1.5.0 and tibbr Service 1.0.0 through 1.5.0, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 66%
VendorProductVersion
tibcotibbr
1.0.0
tibcotibbr
1.0.1
tibcotibbr
1.5.0
tibcotibbr_service
1.0.0
tibcotibbr_service
1.0.1
tibcotibbr_service
1.5.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://secunia.com/advisories/43765
http://securitytracker.com/id?1025220
http://www.osvdb.org/71178
http://www.securityfocus.com/bid/46891
http://www.tibco.com/multimedia/tibbr_advisory_20110315_tcm8-13474.txt
http://www.tibco.com/services/support/advisories/tibbr-tibbr-service-advisory_20110315.jsp
http://www.vupen.com/english/advisories/2011/0687
https://exchange.xforce.ibmcloud.com/vulnerabilities/66113
http://secunia.com/advisories/43765
http://securitytracker.com/id?1025220
http://www.osvdb.org/71178
http://www.securityfocus.com/bid/46891
http://www.tibco.com/multimedia/tibbr_advisory_20110315_tcm8-13474.txt
http://www.tibco.com/services/support/advisories/tibbr-tibbr-service-advisory_20110315.jsp
http://www.vupen.com/english/advisories/2011/0687
https://exchange.xforce.ibmcloud.com/vulnerabilities/66113