TIBCO Administrator Stored Cross Site Scripting vulnerability
The Administration GUI component of TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric, TIBCO Administrator - Enterprise Edition for z/Linux, TIBCO Administrator - Enterprise Edition for z/Linux, TIBCO Runtime Agent, TIBCO Runtime Agent, TIBCO Runtime Agent for z/Linux, and TIBCO Runtime Agent for z/Linux contains an easily exploitable vulnerability that allows an unauthenticated attacker to social engineer a legitimate user with network access to execute a Stored XSS attack targeting the affected system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition: versions 5.10.2 and below, TIBCO Administrator - Enterprise Edition: versions 5.11.0 and 5.11.1, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric: versions 5.10.2 and below, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric: versions 5.11.0 and 5.11.1, TIBCO Administrator - Enterprise Edition for z/Linux: versions 5.10.2 and below, TIBCO Administrator - Enterprise Edition for z/Linux: versions 5.11.0 and 5.11.1, TIBCO Runtime Agent: versions 5.10.2 and below, TIBCO Runtime Agent: versions 5.11.0 and 5.11.1, TIBCO Runtime Agent for z/Linux: versions 5.10.2 and below, and TIBCO Runtime Agent for z/Linux: versions 5.11.0 and 5.11.1.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
TIBCO Administrator - Enterprise Edition
Vendor
TIBCO Software Inc.
Product
TIBCO Administrator - Enterprise Edition
Platforms
Unknown
Default status
Unknown
TIBCO Administrator - Enterprise Edition · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
Unavailable
5.10.2
None listed
TIBCO Administrator - Enterprise Edition
Vendor
TIBCO Software Inc.
Product
TIBCO Administrator - Enterprise Edition
Platforms
Unknown
Default status
Unknown
TIBCO Administrator - Enterprise Edition · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
5.11.0
affected
Unavailable
Unavailable
Unavailable
None listed
5.11.1
affected
Unavailable
Unavailable
Unavailable
None listed
TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric
Vendor
TIBCO Software Inc.
Product
TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric
Platforms
Unknown
Default status
Unknown
TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
Unavailable
5.10.2
None listed
TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric
Vendor
TIBCO Software Inc.
Product
TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric
Platforms
Unknown
Default status
Unknown
TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
5.11.0
affected
Unavailable
Unavailable
Unavailable
None listed
5.11.1
affected
Unavailable
Unavailable
Unavailable
None listed
TIBCO Administrator - Enterprise Edition for z/Linux
Vendor
TIBCO Software Inc.
Product
TIBCO Administrator - Enterprise Edition for z/Linux
Platforms
Unknown
Default status
Unknown
TIBCO Administrator - Enterprise Edition for z/Linux · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
Unavailable
5.10.2
None listed
TIBCO Administrator - Enterprise Edition for z/Linux
Vendor
TIBCO Software Inc.
Product
TIBCO Administrator - Enterprise Edition for z/Linux
Platforms
Unknown
Default status
Unknown
TIBCO Administrator - Enterprise Edition for z/Linux · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
5.11.0
affected
Unavailable
Unavailable
Unavailable
None listed
5.11.1
affected
Unavailable
Unavailable
Unavailable
None listed
TIBCO Runtime Agent
Vendor
TIBCO Software Inc.
Product
TIBCO Runtime Agent
Platforms
Unknown
Default status
Unknown
TIBCO Runtime Agent · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
Unavailable
5.10.2
None listed
TIBCO Runtime Agent
Vendor
TIBCO Software Inc.
Product
TIBCO Runtime Agent
Platforms
Unknown
Default status
Unknown
TIBCO Runtime Agent · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
5.11.0
affected
Unavailable
Unavailable
Unavailable
None listed
5.11.1
affected
Unavailable
Unavailable
Unavailable
None listed
TIBCO Runtime Agent for z/Linux
Vendor
TIBCO Software Inc.
Product
TIBCO Runtime Agent for z/Linux
Platforms
Unknown
Default status
Unknown
TIBCO Runtime Agent for z/Linux · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
Unavailable
5.10.2
None listed
TIBCO Runtime Agent for z/Linux
Vendor
TIBCO Software Inc.
Product
TIBCO Runtime Agent for z/Linux
Platforms
Unknown
Default status
Unknown
TIBCO Runtime Agent for z/Linux · Scoped product and version facts