Unscored severity · published Mar 13, 2012
CVE-2012-0688
Cross-site scripting (XSS) vulnerability in TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3, Service Grid and Service Bus 3.x…
–
CVSS
0.8%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3, Service Grid and Service Bus 3.x before 3.1.5, BusinessWorks Service Engine 5.9.x before 5.9.3, and BPM before 1.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 58% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AB
Activematrix Bpm · Tibco
through 1.2.0; 1.0.1; 1.0.2; 1.1.0; 1.1.1 · source: NVD
AB
Activematrix Businessworks Service Engine · Tibco
5.9.0; 5.9.1; 5.9.2 · source: NVD
AS
Activematrix Service Bus · Tibco
3.0.0; 3.0.1 · source: NVD
AS
Activematrix Service Grid · Tibco
3.0.0; 3.0.1; 3.1.0; 3.1.2 · source: NVD
SF
Silver Fabric Activematrix Service Grid Distribution · Tibco
3.1.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-0688
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-0688
Vendor Advisory
http://www.tibco.com/multimedia/activematrix3_advisory_20120308_tcm8-15728.txt
Vendor Advisory
http://www.tibco.com/services/support/advisories/amx-be-spotfire-advisory_20120308.jsp
More from Activematrix Bpm
9.8
CVE-2019-8993
The administrative web server component of TIBCO Software Inc.'s TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric, TIBCO ActiveMatrix Policy…
8.8
CVE-2019-8992
The administrative server component of TIBCO Software Inc.'s TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric, TIBCO ActiveMatrix Policy…
8.8
CVE-2019-8991
The administrator web interface of TIBCO Software Inc.'s TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric, TIBCO ActiveMatrix Policy Director,…
6.1
CVE-2019-8995
The workspace client, openspace client, and app development client of TIBCO Software Inc.'s TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric,…
–
CVE-2012-0689
The server in TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3, Service Grid and Service Bus 3.x before 3.1.5, BusinessWorks Service…