CVE-2011-2020

TIBCO iProcess Engine <11.1.3 - iProcess Workspace <11.3.1 - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in TIBCO iProcess Engine before 11.1.3 and iProcess Workspace before 11.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References (7)

[Third Party Advisory, VDB Entry] http://osvdb.org/72553

[Vendor Advisory] http://secunia.com/advisories/44639

[Vendor Advisory] http://www.tibco.com/multimedia/iprocess_advisory_20110518_tcm8-13710.txt

[Vendor Advisory] http://www.tibco.com/services/support/advisories/iprocess-advisory_20110518.jsp

[Vendor Advisory] http://www.vupen.com/english/advisories/2011/1272

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/67537

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/47921

Scores

EPSS 0.0052

EPSS Percentile 66.4%

Classification

CWE

CWE-79

Status published

Affected Products (21)

tibco/iprocess_engine < 11.1.2

tibco/iprocess_engine

... and 6 more

Timeline

Published May 20, 2011

Tracked Since Feb 18, 2026