CVE-2019-11212

TIBCO MDM Exposes Cross-Site Scripting Vulnerabilities

CVSS 6.3 MEDIUMEPSS 0.7%

Vexday Risk Score

13Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 6.3EPSS 0.7%KEV nãoPoC —Patch —

Ciclo de vida

09 out 2019Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

The MDM server component of TIBCO Software Inc's TIBCO MDM contains multiple vulnerabilities that theoretically allow an authenticated user with specific roles to perform cross-site scripting (XSS) attacks. This issue affects TIBCO Software Inc.'s TIBCO MDM version 9.0.1 and prior versions; version 9.1.0.

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N

Produtos afetados

TIBCO Software Inc. · TIBCO MDM

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://www.tibco.com/support/advisories/2019/10/tibco-security-advisory-october-8-2019-tibco-mdm http://www.tibco.com/services/support/advisories