Description
Cross-site scripting (XSS) vulnerability in TIBCO iProcess Engine before 11.1.3 and iProcess Workspace before 11.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References
- http://www.tibco.com/services/support/advisories/iprocess-advisory_20110518.jsp
- iprocess-unspecified-xss(67537) vdb-entry
- 47921 vdb-entry
- ADV-2011-1272 vdb-entry
- 44639 third-party-advisory
- 72553 vdb-entry
- http://www.tibco.com/multimedia/iprocess_advisory_20110518_tcm8-13710.txt