CVE-2011-2020: XSS
Cross-site scripting (XSS) vulnerability in TIBCO iProcess Engine before 11.1.3 and iProcess Workspace before 11.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-2020?
CVE-2011-2020 has a medium severity rating due to its cross-site scripting vulnerability which can allow remote attackers to inject malicious scripts.
How do I fix CVE-2011-2020?
To fix CVE-2011-2020, update TIBCO iProcess Engine to version 11.1.3 or later and TIBCO iProcess Workspace to version 11.3.1 or later.
What types of attacks are possible due to CVE-2011-2020?
CVE-2011-2020 can be exploited to perform cross-site scripting attacks, potentially leading to session hijacking or malicious content delivery.
Which versions of TIBCO iProcess Engine are affected by CVE-2011-2020?
CVE-2011-2020 affects TIBCO iProcess Engine versions 10.3.0 through 11.1.2 and several specific versions like 10.5 and 10.6.2.
Does CVE-2011-2020 affect TIBCO iProcess Workspace?
Yes, CVE-2011-2020 also affects TIBCO iProcess Workspace versions up to 11.3.