Unscored severity · published Apr 8, 2014
CVE-2014-2542
Cross-site scripting (XSS) vulnerability in the Rendezvous Daemon (rvd), Rendezvous Routing Daemon (rvrd), Rendezvous Secure Daemon (rvsd), and Rendezvous Secure Routing Daemon…
–
CVSS
1.8%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in the Rendezvous Daemon (rvd), Rendezvous Routing Daemon (rvrd), Rendezvous Secure Daemon (rvsd), and Rendezvous Secure Routing Daemon (rvsrd) in TIBCO Rendezvous before 8.4.2, Messaging Appliance before 8.7.1, and Substation ES before 2.8.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MA
Messaging Appliance · Tibco
through 8.7.0 · source: NVD
RE
Rendezvous · Tibco
through 8.4.1; 7.4.11; 7.5.1; 7.5.2; 7.5.3; 7.5.4; +4 more · source: NVD
SE
Substantiation ES · Tibco
through 2.8.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-2542
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-2542
www.securityfocus.com
http://www.securityfocus.com/bid/101873
www.securityfocus.com
http://www.securityfocus.com/bid/66737
www.securitytracker.com
http://www.securitytracker.com/id/1030070
Vendor Advisory
http://www.tibco.com/mk/advisory.jsp
Vendor Advisory
http://www.tibco.com/multimedia/rendezvous_advisory_20140408_tcm8-20763.txt
More from Messaging Appliance
–
CVE-2015-4555
Buffer overflow in the HTTP administrative interface in TIBCO Rendezvous before 8.4.4, Rendezvous Network Server before 1.1.1, Substation ES before 2.9.0, and Messaging Appliance…
–
CVE-2014-2543
Buffer overflow in the Rendezvous Daemon (rvd), Rendezvous Routing Daemon (rvrd), Rendezvous Secure Daemon (rvsd), and Rendezvous Secure Routing Daemon (rvsrd) in TIBCO Rendezvous…
–
CVE-2014-2541
The Rendezvous Daemon (rvd), Rendezvous Routing Daemon (rvrd), Rendezvous Secure Daemon (rvsd), and Rendezvous Secure Routing Daemon (rvsrd) in TIBCO Rendezvous before 8.4.2,…