Unscored severity · published Dec 17, 2010
CVE-2010-4495
Unspecified vulnerability in the ActiveMatrix Runtime component in TIBCO ActiveMatrix Service Grid 3.0.0, 3.0.1, and 3.1.0; ActiveMatrix Service Bus 3.0.0 and 3.0.1; ActiveMatrix…
–
CVSS
2.9%
EPSS
No
On KEV
Description
Unspecified vulnerability in the ActiveMatrix Runtime component in TIBCO ActiveMatrix Service Grid 3.0.0, 3.0.1, and 3.1.0; ActiveMatrix Service Bus 3.0.0 and 3.0.1; ActiveMatrix BusinessWorks Service Engine 5.9.0; ActiveMatrix BPM 1.0.1 and 1.0.2; Silver BPM Service 1.0.1; and Silver CAP Service 1.0.0 allows remote authenticated users to execute arbitrary code via vectors related to JMX connections.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.9% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AB
Activematrix Bpm · Tibco
1.0.1; 1.0.2 · source: NVD
AB
Activematrix Businessworks Service Engine · Tibco
5.9.0 · source: NVD
AS
Activematrix Service Bus · Tibco
3.0.0; 3.0.1 · source: NVD
AS
Activematrix Service Grid · Tibco
3.0.0; 3.0.1; 3.1.0 · source: NVD
SB
Silver Bpm Service · Tibco
1.0.1 · source: NVD
SC
Silver Cap Service · Tibco
1.0.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-4495
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-4495
Vendor Advisory
http://secunia.com/advisories/42640
www.securityfocus.com
http://www.securityfocus.com/bid/45400
www.securitytracker.com
http://www.securitytracker.com/id?1024894
Vendor Advisory
http://www.tibco.com/multimedia/activematrix_advisory_20101214_tcm8-12728.txt
Vendor Advisory
http://www.vupen.com/english/advisories/2010/3241
More from Activematrix Bpm
9.8
CVE-2019-8993
The administrative web server component of TIBCO Software Inc.'s TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric, TIBCO ActiveMatrix Policy…
8.8
CVE-2019-8992
The administrative server component of TIBCO Software Inc.'s TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric, TIBCO ActiveMatrix Policy…
8.8
CVE-2019-8991
The administrator web interface of TIBCO Software Inc.'s TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric, TIBCO ActiveMatrix Policy Director,…
6.1
CVE-2019-8995
The workspace client, openspace client, and app development client of TIBCO Software Inc.'s TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric,…
–
CVE-2012-0689
The server in TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3, Service Grid and Service Bus 3.x before 3.1.5, BusinessWorks Service…