EUVD-2011-2014

Malware in sbrugna...

PT-2020-16639

Name of the Vulnerable Software and Affected Versions TIBCO iProcess Workspace Browser versions 11.6.0 and below Description The Core component of TIBCO Software Inc.'s TIBCO iProcess Workspace Browser contains an issue that theoretically allows an unauthenticated attacker with network access to...

CVE-2020-27146: Cross-Site Request Forgery (CSRF)

The Core component of TIBCO Software Inc.'s TIBCO iProcess Workspace Browser contains a vulnerability that theoretically allows an unauthenticated attacker with network access to execute a Cross Site Request Forgery CSRF attack on the affected system. A successful attack using this vulnerability...

Session fixation

Session fixation vulnerability in TIBCO iProcess Engine before 11.1.3 and iProcess Workspace before 11.3.1 allows remote attackers to hijack web sessions via unspecified vectors...

CVE-2011-2021

CVE-2011-2021 covers a session-fixation vulnerability in TIBCO iProcess components (Engine before 11.1.3 and Workspace before 11.3.1). The issue can allow remote attackers to hijack web sessions via unspecified vectors by manipulating inbound HTTP session handling. Affected components include TIB...

PT-2011-3557

Name of the Vulnerable Software and Affected Versions TIBCO iProcess Engine versions prior to 11.1.3 TIBCO iProcess Workspace versions prior to 11.3.1 Description A session fixation issue allows remote attackers to hijack web sessions. Recommendations For TIBCO iProcess Engine versions prior to...

PT-2011-3556

Name of the Vulnerable Software and Affected Versions TIBCO iProcess Engine versions prior to 11.1.3 TIBCO iProcess Workspace versions prior to 11.3.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For TIBCO iProcess...