TIBCO Security Advisory: September 25, 2013 - TIBCOActiveMatrixBusinessWorks™

TIBCO ActiveMatrix BusinessWorks™ vulnerability Original release date: Sep 25, 2013 Lastrevised: -- CVE-2012-0687 Source: TIBCO SoftwareInc. TIBCO ActiveMatrix vulnerability Original release date: Sep 25, 2013 Last revised: -- Source: TIBCO Software Inc. Systems Affected TIBCO ActiveMatrix Servic...

CVE-2012-0688

Cross-site scripting XSS vulnerability in TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3, Service Grid and Service Bus 3.x before 3.1.5, BusinessWorks Service Engine 5.9.x before 5.9.3, and BPM before 1.3.0 allows remote attackers to inject arbitra...

CVE-2012-0689

The server in TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3, Service Grid and Service Bus 3.x before 3.1.5, BusinessWorks Service Engine 5.9.x before 5.9.3, and BPM before 1.3.0 allows remote attackers to discover credentials via unspecified vecto...

CVE-2012-0687

TIBCO ActiveMatrix Runtime Platform in Service Grid and Service Bus 2.x before 2.3.2 and BusinessWorks Service Engine before 5.8.2; TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3, Service Grid and Service Bus 3.x before 3.1.5, BusinessWorks Service...

Design/Logic Flaw

The server in TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3, Service Grid and Service Bus 3.x before 3.1.5, BusinessWorks Service Engine 5.9.x before 5.9.3, and BPM before 1.3.0 allows remote attackers to discover credentials via unspecified vecto...

Cross site scripting

Cross-site scripting XSS vulnerability in TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3, Service Grid and Service Bus 3.x before 3.1.5, BusinessWorks Service Engine 5.9.x before 5.9.3, and BPM before 1.3.0 allows remote attackers to inject arbitra...

Code injection

TIBCO ActiveMatrix Runtime Platform in Service Grid and Service Bus 2.x before 2.3.2 and BusinessWorks Service Engine before 5.8.2; TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3, Service Grid and Service Bus 3.x before 3.1.5, BusinessWorks Service...

CVE-2012-0688

Cross-site scripting XSS vulnerability in TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3, Service Grid and Service Bus 3.x before 3.1.5, BusinessWorks Service Engine 5.9.x before 5.9.3, and BPM before 1.3.0 allows remote attackers to inject arbitra...

CVE-2012-0688

CVE-2012-0688 is a cross-site scripting (XSS) vulnerability in TIBCO ActiveMatrix Platform components, affecting TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3 and the Service Grid/Bus 3.x before 3.1.5, BusinessWorks Service Engine 5.9.x before 5.9.3, and BPM before 1.3.0. The i...

CVE-2012-0687

CVE-2012-0687 affects multiple TIBCO ActiveMatrix components, enabling information disclosure via crafted URLs. Affected products (as documented): ActiveMatrix Runtime Platform components (Service Grid, Service Bus, BusinessWorks Service Engine) across multiple versions and editions (e.g., 2.x pr...

CVE-2012-0689

The server in TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3, Service Grid and Service Bus 3.x before 3.1.5, BusinessWorks Service Engine 5.9.x before 5.9.3, and BPM before 1.3.0 allows remote attackers to discover credentials via unspecified vecto...

CVE-2012-0687

TIBCO ActiveMatrix Runtime Platform in Service Grid and Service Bus 2.x before 2.3.2 and BusinessWorks Service Engine before 5.8.2; TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3, Service Grid and Service Bus 3.x before 3.1.5, BusinessWorks Service...

CVE-2012-0689

CVE-2012-0689 affects TIBCO ActiveMatrix Platform components: Service Grid 3.x before 3.1.5, Service Bus 3.x before 3.1.5, BusinessWorks Service Engine 5.9.x before 5.9.3, BPM before 1.3.0, and TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3. Root cause per advisory: server may d...

TIBCO Security Advisory: March 08, 2012 - TIBCO ActiveMatrix®2

TIBCO ActiveMatrix® vulnerability Original release date: Mar 8, 2012 Last revised: -- CVE-2012-0687 Source: TIBCO SoftwareInc. TIBCO ActiveMatrix vulnerability Original release date: Mar 8, 2012 Last revised: -- Source: TIBCO Software Inc. Systems Affected TIBCO ActiveMatrix Service Grid version...

TIBCO Security Advisory: March 08, 2012 - TIBCO ActiveMatrix®3

TIBCO ActiveMatrix® vulnerability Original release date: Mar 8, 2012 Last revised: -- CVE-2012-0687, CVE-2012-0688, CVE-2012-0689 Source: TIBCO SoftwareInc. TIBCO ActiveMatrix vulnerability Original release date: Mar 8, 2012 Last revised: -- Source: TIBCO Software Inc. Systems Affected TIBCO...

CVE-2010-4495

Unspecified vulnerability in the ActiveMatrix Runtime component in TIBCO ActiveMatrix Service Grid 3.0.0, 3.0.1, and 3.1.0; ActiveMatrix Service Bus 3.0.0 and 3.0.1; ActiveMatrix BusinessWorks Service Engine 5.9.0; ActiveMatrix BPM 1.0.1 and 1.0.2; Silver BPM Service 1.0.1; and Silver CAP Service...

Code injection

Unspecified vulnerability in the ActiveMatrix Runtime component in TIBCO ActiveMatrix Service Grid 3.0.0, 3.0.1, and 3.1.0; ActiveMatrix Service Bus 3.0.0 and 3.0.1; ActiveMatrix BusinessWorks Service Engine 5.9.0; ActiveMatrix BPM 1.0.1 and 1.0.2; Silver BPM Service 1.0.1; and Silver CAP Service...

CVE-2010-4495

The CVE-2010-4495 entry concerns TIBCO ActiveMatrix components with a critical vulnerability in handling of JMX connections, allowing remote authenticated users to execute arbitrary code. Affected products include: TIBCO ActiveMatrix Service Grid (versions 3.0.0, 3.0.1, 3.1.0); ActiveMatrix Servi...

TIBCO Security Advisory: December 14, 2010 - TIBCOActiveMatrix®

TIBCO ActiveMatrix® vulnerability Original release date: Dec 14,2010 Last revised: -- CVE-2010-4495 Source: TIBCO Software Inc. TIBCO ActiveMatrix vulnerability Original release date: Dec 14, 2010 Last revised: -- Source: TIBCO Software Inc. Systems Affected TIBCO ActiveMatrix Service Grid versio...

CVE-2010-3491

The 1 ActiveMatrix Runtime and 2 ActiveMatrix Administrator components in TIBCO ActiveMatrix Service Grid before 2.3.1, ActiveMatrix Service Bus before 2.3.1, ActiveMatrix BusinessWorks Service Engine before 5.8.1, and ActiveMatrix Service Performance Manager before 1.3.2 do not properly handle J...