Unscored severity · published Sep 19, 2011
CVE-2011-3423
Cross-site scripting (XSS) vulnerability in the Managed File Transfer server in TIBCO Managed File Transfer Internet Server before 7.1.1 and Managed File Transfer Command Center…
–
CVSS
1.3%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in the Managed File Transfer server in TIBCO Managed File Transfer Internet Server before 7.1.1 and Managed File Transfer Command Center before 7.1.1, and the server in TIBCO Slingshot before 1.8.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MF
Managed File Transfer Command Center · Tibco
through 7.1.0; 6.7; 7.0; 7.0.1 · source: NVD
MF
Managed File Transfer Internet Server · Tibco
through 7.1.0; 6.7; 7.0; 7.0.1 · source: NVD
SL
Slingshot · Tibco
through 1.8.0 · source: NVD
Affected product
MF
Managed File Transfer Command Center
Tibco
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-3423
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-3423
secunia.com
http://secunia.com/advisories/45976
securitytracker.com
http://securitytracker.com/id?1026051
www.osvdb.org
http://www.osvdb.org/75396
www.securityfocus.com
http://www.securityfocus.com/bid/49619
www.tibco.com
http://www.tibco.com/multimedia/mft-slingshot_advisory_20110913_tcm8-14340.txt
www.tibco.com
http://www.tibco.com/services/support/advisories/mft-slingshot-advisory_20110913.jsp
More from Managed File Transfer Command Center
9.9
CVE-2018-18810
The Administrator Service component of TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center, and TIBCO Managed File Transfer Internet Server contains vulnerabilities…
9.6
CVE-2020-9413
The MFT Browser file transfer client and MFT Browser admin client components of TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center and TIBCO Managed File Transfer…
9.1
CVE-2022-22774
The DOM XML parser and SAX XML parser components of TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center, TIBCO Managed File Transfer Command Center, TIBCO Managed…
8.8
CVE-2020-9414
The MFT admin service component of TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center and TIBCO Managed File Transfer Internet Server contains a vulnerability that…
8.8
CVE-2017-5531
Deployments of TIBCO Managed File Transfer Command Center versions 8.0.0 and 8.0.1 and TIBCO Managed File Transfer Internet Server versions 8.0.0 and 8.0.1 that enable the…