CVE-2010-4495

TIBCO ActiveMatrix Runtime - Authenticated Remote Code Execution via JMX Connections

Title source: manual
STIX 2.1

Description

Unspecified vulnerability in the ActiveMatrix Runtime component in TIBCO ActiveMatrix Service Grid 3.0.0, 3.0.1, and 3.1.0; ActiveMatrix Service Bus 3.0.0 and 3.0.1; ActiveMatrix BusinessWorks Service Engine 5.9.0; ActiveMatrix BPM 1.0.1 and 1.0.2; Silver BPM Service 1.0.1; and Silver CAP Service 1.0.0 allows remote authenticated users to execute arbitrary code via vectors related to JMX connections.

References (5)

Core 5
Core References
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/42640
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2010/3241
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/45400
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1024894

Scores

EPSS 0.0106
EPSS Percentile 77.9%

Details

Status published
Products (10)
tibco/activematrix_bpm 1.0.1
tibco/activematrix_bpm 1.0.2
tibco/activematrix_businessworks_service_engine 5.9.0
tibco/activematrix_service_bus 3.0.0
tibco/activematrix_service_bus 3.0.1
tibco/activematrix_service_grid 3.0.0
tibco/activematrix_service_grid 3.0.1
tibco/activematrix_service_grid 3.1.0
tibco/silver_bpm_service 1.0.1
tibco/silver_cap_service 1.0.0
Published Dec 17, 2010
Tracked Since Feb 18, 2026