CVE-2010-4495
Unspecified vulnerability in the ActiveMatrix Runtime component in TIBCO ActiveMatrix Service Grid 3.0.0, 3.0.1, and 3.1.0; ActiveMatrix Service Bus 3.0.0 and 3.0.1; ActiveMatrix BusinessWorks Service Engine 5.9.0; ActiveMatrix BPM 1.0.1 and 1.0.2;…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.96%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Unspecified vulnerability in the ActiveMatrix Runtime component in TIBCO ActiveMatrix Service Grid 3.0.0, 3.0.1, and 3.1.0; ActiveMatrix Service Bus 3.0.0 and 3.0.1; ActiveMatrix BusinessWorks Service Engine 5.9.0; ActiveMatrix BPM 1.0.1 and 1.0.2; Silver BPM Service 1.0.1; and Silver CAP Service 1.0.0 allows remote authenticated users to execute arbitrary code via vectors related to JMX connections.
- CVSS 2.0
- 9.0 HIGHAV:N/AC:L/Au:S/C:C/I:C/A:C
- EPSS
- 2.96% probability · 86th percentile
- CISA KEV
- Not listed
- Affected
- tibco/activematrix bpm · tibco/activematrix businessworks service engine · tibco/activematrix service bus · tibco/activematrix service grid · tibco/silver bpm service · tibco/silver cap service
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/42640Vendor Advisory
- http://www.securityfocus.com/bid/45400
- http://www.securitytracker.com/id?1024894
- http://www.tibco.com/multimedia/activematrix_advisory_20101214_tcm8-12728.txtVendor Advisory
- http://www.vupen.com/english/advisories/2010/3241Vendor Advisory
- http://secunia.com/advisories/42640Vendor Advisory
- http://www.securityfocus.com/bid/45400
- http://www.securitytracker.com/id?1024894
- http://www.tibco.com/multimedia/activematrix_advisory_20101214_tcm8-12728.txtVendor Advisory
- http://www.vupen.com/english/advisories/2010/3241Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.