CVE-2011-1414: XSS
First published: Tue Mar 22 2011(Updated: )
Cross-site scripting (XSS) vulnerability in the tibbr web server, as used in TIBCO tibbr 1.0.0 through 1.5.0 and tibbr Service 1.0.0 through 1.5.0, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| TIBCO Tibbr | =1.5.0 | |
| TIBCO Tibbr | =1.0.1 | |
| TIBCO tibbr | =1.5.0 | |
| TIBCO tibbr | =1.0.0 | |
| TIBCO tibbr | =1.0.1 | |
| TIBCO Tibbr | =1.0.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.tibco.com/multimedia/tibbr_advisory_20110315_tcm8-13474.txt
- http://www.osvdb.org/71178
- http://www.securityfocus.com/bid/46891
- http://www.tibco.com/services/support/advisories/tibbr-tibbr-service-advisory_20110315.jsp
- http://www.vupen.com/english/advisories/2011/0687
- http://secunia.com/advisories/43765
- http://securitytracker.com/id?1025220
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66113
Frequently Asked Questions
What is the severity of CVE-2011-1414?
CVE-2011-1414 is rated as a medium severity vulnerability due to its potential to allow cross-site scripting attacks.
How do I fix CVE-2011-1414?
To fix CVE-2011-1414, it is recommended to update TIBCO tibbr to version 1.5.1 or later, as these versions contain patches that address the vulnerability.
What types of attacks can be carried out using CVE-2011-1414?
CVE-2011-1414 can be exploited by attackers to inject arbitrary web scripts or HTML into the affected system, potentially leading to data theft or session hijacking.
Which versions of TIBCO tibbr are affected by CVE-2011-1414?
CVE-2011-1414 affects TIBCO tibbr versions 1.0.0 through 1.5.0 and tibbr Service versions 1.0.0 through 1.5.0.
Where can I find more information about CVE-2011-1414?
More information about CVE-2011-1414 can typically be found in TIBCO's security advisories or relevant cybersecurity databases.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/author
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/weakness
- agent/softwarecombine
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/tibco
- canonical/tibco tibbr
- version/tibco tibbr/1.5.0
- version/tibco tibbr/1.0.1
- version/tibco tibbr/1.0.0