Unscored severity · published Jan 7, 2011
CVE-2010-4496
Multiple SQL injection vulnerabilities in Collaborative Information Manager server, as used in TIBCO Collaborative Information Manager before 8.1.0 and ActiveCatalog before 1.0.1,…
–
CVSS
1.3%
EPSS
No
On KEV
Description
Multiple SQL injection vulnerabilities in Collaborative Information Manager server, as used in TIBCO Collaborative Information Manager before 8.1.0 and ActiveCatalog before 1.0.1, allow remote attackers to execute arbitrary SQL commands via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 71% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AC
Activecatalog · Tibco
through 1.0 · source: NVD
CI
Collaborative Information Manager · Tibco
through 8.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-4496
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-4496
osvdb.org
http://osvdb.org/70371
Vendor Advisory
http://secunia.com/advisories/42791
www.securityfocus.com
http://www.securityfocus.com/bid/45691
www.securitytracker.com
http://www.securitytracker.com/id?1024942
Vendor Advisory
http://www.tibco.com/multimedia/cim_advisory_20110105_tcm8-12765.txt
Vendor Advisory
http://www.tibco.com/services/support/advisories/cim-advisory_20100105.jsp
More from Activecatalog
–
CVE-2010-4497
Cross-site scripting (XSS) vulnerability in Collaborative Information Manager server, as used in TIBCO Collaborative Information Manager before 8.1.0 and ActiveCatalog before…
–
CVE-2010-4498
Unspecified vulnerability in Collaborative Information Manager server, as used in TIBCO Collaborative Information Manager before 8.1.0 and ActiveCatalog before 1.0.1, allows…
–
CVE-2010-4499
Session fixation vulnerability in Collaborative Information Manager server, as used in TIBCO Collaborative Information Manager before 8.1.0 and ActiveCatalog before 1.0.1, allows…