CVE-2012-0687

CVE-2012-0687 affects multiple TIBCO ActiveMatrix components, enabling information disclosure via crafted URLs. Affected products (as documented): ActiveMatrix Runtime Platform components (Service Grid, Service Bus, BusinessWorks Service Engine) across multiple versions and editions (e.g., 2.x pr...

CVE-2012-0688

CVE-2012-0688 is a cross-site scripting (XSS) vulnerability in TIBCO ActiveMatrix Platform components, affecting TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3 and the Service Grid/Bus 3.x before 3.1.5, BusinessWorks Service Engine 5.9.x before 5.9.3, and BPM before 1.3.0. The i...

CVE-2012-0688

Cross-site scripting XSS vulnerability in TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3, Service Grid and Service Bus 3.x before 3.1.5, BusinessWorks Service Engine 5.9.x before 5.9.3, and BPM before 1.3.0 allows remote attackers to inject arbitra...

CVE-2012-0689

CVE-2012-0689 affects TIBCO ActiveMatrix Platform components: Service Grid 3.x before 3.1.5, Service Bus 3.x before 3.1.5, BusinessWorks Service Engine 5.9.x before 5.9.3, BPM before 1.3.0, and TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3. Root cause per advisory: server may d...

CVE-2012-0687

TIBCO ActiveMatrix Runtime Platform in Service Grid and Service Bus 2.x before 2.3.2 and BusinessWorks Service Engine before 5.8.2; TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3, Service Grid and Service Bus 3.x before 3.1.5, BusinessWorks Service...

CVE-2012-0689

The server in TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3, Service Grid and Service Bus 3.x before 3.1.5, BusinessWorks Service Engine 5.9.x before 5.9.3, and BPM before 1.3.0 allows remote attackers to discover credentials via unspecified vecto...

CVE-2012-0687: Exposure of Sensitive Information to an Unauthorized Actor

TIBCO ActiveMatrix Runtime Platform in Service Grid and Service Bus 2.x before 2.3.2 and BusinessWorks Service Engine before 5.8.2; TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3, Service Grid and Service Bus 3.x before 3.1.5, BusinessWorks Service...

CVE-2012-0688: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3, Service Grid and Service Bus 3.x before 3.1.5, BusinessWorks Service Engine 5.9.x before 5.9.3, and BPM before 1.3.0 allows remote attackers to inject arbitra...

CVE-2012-0689: Exposure of Sensitive Information to an Unauthorized Actor

The server in TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3, Service Grid and Service Bus 3.x before 3.1.5, BusinessWorks Service Engine 5.9.x before 5.9.3, and BPM before 1.3.0 allows remote attackers to discover credentials via unspecified vecto...

TIBCO Security Advisory: March 08, 2012 - TIBCO ActiveMatrix®2

TIBCO ActiveMatrix® vulnerability Original release date: Mar 8, 2012 Last revised: -- CVE-2012-0687 Source: TIBCO SoftwareInc. TIBCO ActiveMatrix vulnerability Original release date: Mar 8, 2012 Last revised: -- Source: TIBCO Software Inc. Systems Affected TIBCO ActiveMatrix Service Grid version...

TIBCO Security Advisory: March 08, 2012 - TIBCO ActiveMatrix®3

TIBCO ActiveMatrix® vulnerability Original release date: Mar 8, 2012 Last revised: -- CVE-2012-0687, CVE-2012-0688, CVE-2012-0689 Source: TIBCO SoftwareInc. TIBCO ActiveMatrix vulnerability Original release date: Mar 8, 2012 Last revised: -- Source: TIBCO Software Inc. Systems Affected TIBCO...

CVE-2010-4495

Unspecified vulnerability in the ActiveMatrix Runtime component in TIBCO ActiveMatrix Service Grid 3.0.0, 3.0.1, and 3.1.0; ActiveMatrix Service Bus 3.0.0 and 3.0.1; ActiveMatrix BusinessWorks Service Engine 5.9.0; ActiveMatrix BPM 1.0.1 and 1.0.2; Silver BPM Service 1.0.1; and Silver CAP Service...

Code injection

Unspecified vulnerability in the ActiveMatrix Runtime component in TIBCO ActiveMatrix Service Grid 3.0.0, 3.0.1, and 3.1.0; ActiveMatrix Service Bus 3.0.0 and 3.0.1; ActiveMatrix BusinessWorks Service Engine 5.9.0; ActiveMatrix BPM 1.0.1 and 1.0.2; Silver BPM Service 1.0.1; and Silver CAP Service...

CVE-2010-4495

The CVE-2010-4495 entry concerns TIBCO ActiveMatrix components with a critical vulnerability in handling of JMX connections, allowing remote authenticated users to execute arbitrary code. Affected products include: TIBCO ActiveMatrix Service Grid (versions 3.0.0, 3.0.1, 3.1.0); ActiveMatrix Servi...

CVE-2010-4495: Undefined Security Weakness

Unspecified vulnerability in the ActiveMatrix Runtime component in TIBCO ActiveMatrix Service Grid 3.0.0, 3.0.1, and 3.1.0; ActiveMatrix Service Bus 3.0.0 and 3.0.1; ActiveMatrix BusinessWorks Service Engine 5.9.0; ActiveMatrix BPM 1.0.1 and 1.0.2; Silver BPM Service 1.0.1; and Silver CAP Service...

TIBCO Security Advisory: December 14, 2010 - TIBCOActiveMatrix®

TIBCO ActiveMatrix® vulnerability Original release date: Dec 14,2010 Last revised: -- CVE-2010-4495 Source: TIBCO Software Inc. TIBCO ActiveMatrix vulnerability Original release date: Dec 14, 2010 Last revised: -- Source: TIBCO Software Inc. Systems Affected TIBCO ActiveMatrix Service Grid versio...

CVE-2010-3491

The 1 ActiveMatrix Runtime and 2 ActiveMatrix Administrator components in TIBCO ActiveMatrix Service Grid before 2.3.1, ActiveMatrix Service Bus before 2.3.1, ActiveMatrix BusinessWorks Service Engine before 5.8.1, and ActiveMatrix Service Performance Manager before 1.3.2 do not properly handle J...

Code injection

The 1 ActiveMatrix Runtime and 2 ActiveMatrix Administrator components in TIBCO ActiveMatrix Service Grid before 2.3.1, ActiveMatrix Service Bus before 2.3.1, ActiveMatrix BusinessWorks Service Engine before 5.8.1, and ActiveMatrix Service Performance Manager before 1.3.2 do not properly handle J...

CVE-2010-3491

The CVE-2010-3491 issue affects multiple TIBCO ActiveMatrix components: ActiveMatrix Runtime and ActiveMatrix Administrator (service grid before 2.3.1), ActiveMatrix Service Bus before 2.3.1, ActiveMatrix BusinessWorks Service Engine before 5.8.1, and ActiveMatrix Service Performance Manager befo...

CVE-2010-3491

The 1 ActiveMatrix Runtime and 2 ActiveMatrix Administrator components in TIBCO ActiveMatrix Service Grid before 2.3.1, ActiveMatrix Service Bus before 2.3.1, ActiveMatrix BusinessWorks Service Engine before 5.8.1, and ActiveMatrix Service Performance Manager before 1.3.2 do not properly handle J...