Skip to content
OpenAdvisories
Medium · 6.3 CVE-2019-11212 EUVD-2019-2913GHSA-hc92-44jh-x2w7

TIBCO MDM Exposes Cross-Site Scripting Vulnerabilities

Published Oct 9, 2019 · Updated Sep 16, 2024 · Assigned by tibco

Description

The MDM server component of TIBCO Software Inc's TIBCO MDM contains multiple vulnerabilities that theoretically allow an authenticated user with specific roles to perform cross-site scripting (XSS) attacks. This issue affects TIBCO Software Inc.'s TIBCO MDM version 9.0.1 and prior versions; version 9.1.0.

Affected products

VendorProductAffectedFixed
TIBCO Software TIBCO MDM unspecified – ≤ 9.0.1, 9.1.0 —

References