CVE Feed

    Dashboard / CVE / CVE-2012-0688

    CVE-2012-0688

    Cross-site scripting (XSS) vulnerability in TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3, Service Grid and Service Bus 3.x before 3.1.5, BusinessWorks Service Engine 5.9.x before 5.9.3, and BPM before 1.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

    Published:Mar 13, 2012
    Last Modified:Apr 11, 2025
    EPS:Mar 13, 2012
    EPSS Score:0.00248
    CVSS Score:4.3

    Affected Products

    Vendor
    Tibco
    Product
    Activematrix Bpm
    Vendor
    Tibco
    Product
    Activematrix Businessworks Service Engine
    Vendor
    Tibco
    Product
    Activematrix Service Bus
    Vendor
    Tibco
    Product
    Activematrix Service Grid
    Vendor
    Tibco
    Product
    Silver Fabric Activematrix Service Grid Distribution

    Exploits

    No exploit reference

    Related CVEs

    CVE-2019-8995 (CVSS 6.1) — The workspace client, openspace client, and app development client of TIBCO Software Inc.'s TIBCO ActiveMatrix…
    CVE-2019-8993 (CVSS 9.8) — The administrative web server component of TIBCO Software Inc.'s TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BP…
    CVE-2019-8992 (CVSS 8.8) — The administrative server component of TIBCO Software Inc.'s TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Di…
    CVE-2019-8991 (CVSS 8.8) — The administrator web interface of TIBCO Software Inc.'s TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distri…
    CVE-2012-0689 (CVSS 5) — The server in TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3,…
    CVE-2012-0687 (CVSS 5) — TIBCO ActiveMatrix Runtime Platform in Service Grid and Service Bus 2.x before 2.3.2 and BusinessWorks Service…
    CVE-2010-4495 (CVSS 9) — Unspecified vulnerability in the ActiveMatrix Runtime component in TIBCO ActiveMatrix Service Grid 3.0.0, 3.0.…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High