CVE-2012-0688

Name of the Vulnerable Software and Affected Versions TIBCO ActiveMatrix Platform versions 3.1.3 TIBCO Silver Fabric ActiveMatrix Service Grid Distribution version 3.1.3 TIBCO Service Grid and Service Bus versions 3.x before 3.1.5 TIBCO BusinessWorks Service Engine versions 5.9.x before 5.9.3 TIBCO BPM versions prior to 1.3.0

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Recommendations For TIBCO ActiveMatrix Platform version 3.1.3, update to a version later than 3.1.3. For TIBCO Silver Fabric ActiveMatrix Service Grid Distribution version 3.1.3, update to a version later than 3.1.3. For TIBCO Service Grid and Service Bus versions 3.x before 3.1.5, update to version 3.1.5 or later. For TIBCO BusinessWorks Service Engine versions 5.9.x before 5.9.3, update to version 5.9.3 or later. For TIBCO BPM versions prior to 1.3.0, update to version 1.3.0 or later.