CVE-2019-8995
TIBCO ActiveMatrix BPM Open Redirect Vulnerability
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
The workspace client, openspace client, and app development client of TIBCO Software Inc.'s TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric, and TIBCO Silver Fabric Enabler for ActiveMatrix BPM contain a vulnerability wherein a malicious URL could trick a user into visiting a website of the attacker's choice. Affected releases are TIBCO Software Inc.'s TIBCO ActiveMatrix BPM: versions up to and including 4.2.0, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric: versions up to and including 4.2.0, and TIBCO Silver Fabric Enabler for ActiveMatrix BPM: versions up to and including 1.4.1.
El cliente de espacio de trabajo, el cliente de espacio abierto y el cliente de desarrollo de aplicaciones de TIBCO Software Inc. de TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distribution para TIBCO Silver Fabric y TIBCO Silver Fabric Enabler para ActiveMatrix BPM contienen una vulnerabilidad en la que una URL maliciosa podría engañar a un usuario para que visite un sitio web elegido por el atacante. Las versiones afectadas son TIBCO Software Inc.'s TIBCO ActiveMatrix BPM: versiones hasta 4.2.0 inclusive, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric: versiones hasta 4.2.0 inclusive, y TIBCO Silver Fabric Enabler for ActiveMatrix BPM: versiones hasta 1.4.1 inclusive.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2019-02-21 CVE Reserved
- 2019-04-24 CVE Published
- 2024-04-17 EPSS Updated
- 2024-09-16 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-601: URL Redirection to Untrusted Site ('Open Redirect')
CAPEC
References (3)
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Tibco Search vendor "Tibco" | Activematrix Bpm Search vendor "Tibco" for product "Activematrix Bpm" | <= 4.2.0 Search vendor "Tibco" for product "Activematrix Bpm" and version " <= 4.2.0" | - |
Affected
| ||||||
Tibco Search vendor "Tibco" | Activematrix Bpm Search vendor "Tibco" for product "Activematrix Bpm" | <= 4.2.0 Search vendor "Tibco" for product "Activematrix Bpm" and version " <= 4.2.0" | silver_fabric |
Affected
| ||||||
Tibco Search vendor "Tibco" | Silver Fabric Enabler Search vendor "Tibco" for product "Silver Fabric Enabler" | <= 1.4.1 Search vendor "Tibco" for product "Silver Fabric Enabler" and version " <= 1.4.1" | activematrix_bpm |
Affected
|