Unscored severity · published Jan 7, 2011
CVE-2010-4498
Unspecified vulnerability in Collaborative Information Manager server, as used in TIBCO Collaborative Information Manager before 8.1.0 and ActiveCatalog before 1.0.1, allows…
–
CVSS
1.7%
EPSS
No
On KEV
Description
Unspecified vulnerability in Collaborative Information Manager server, as used in TIBCO Collaborative Information Manager before 8.1.0 and ActiveCatalog before 1.0.1, allows remote attackers to modify data or obtain sensitive information via a crafted URL.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 77% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AC
Activecatalog · Tibco
through 1.0 · source: NVD
CI
Collaborative Information Manager · Tibco
through 8.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-4498
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-4498
osvdb.org
http://osvdb.org/70373
Vendor Advisory
http://secunia.com/advisories/42791
www.securityfocus.com
http://www.securityfocus.com/bid/45691
www.securitytracker.com
http://www.securitytracker.com/id?1024942
Vendor Advisory
http://www.tibco.com/multimedia/cim_advisory_20110105_tcm8-12765.txt
Vendor Advisory
http://www.tibco.com/services/support/advisories/cim-advisory_20100105.jsp
More from Activecatalog
–
CVE-2010-4496
Multiple SQL injection vulnerabilities in Collaborative Information Manager server, as used in TIBCO Collaborative Information Manager before 8.1.0 and ActiveCatalog before 1.0.1,…
–
CVE-2010-4497
Cross-site scripting (XSS) vulnerability in Collaborative Information Manager server, as used in TIBCO Collaborative Information Manager before 8.1.0 and ActiveCatalog before…
–
CVE-2010-4499
Session fixation vulnerability in Collaborative Information Manager server, as used in TIBCO Collaborative Information Manager before 8.1.0 and ActiveCatalog before 1.0.1, allows…