Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2017-5536

TIBCO DataSynapse GridServer manager component vulnerable to cross-site scripting attacks

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
tibco

Description

The GridServer Broker, and GridServer Director components of TIBCO Software Inc. TIBCO DataSynapse GridServer Manager contain vulnerabilities which may allow an authenticated user to perform cross-site scripting (XSS). In addition, an authenticated user could be a victim of a cross-site request forgery (CSRF) attack. Affected releases include TIBCO Software Inc.'s TIBCO DataSynapse GridServer Manager: versions up to and including 5.1.3; 6.0.0; 6.0.1; 6.0.2; 6.1.0; 6.1.1; and 6.2.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TIBCO Software Inc. TIBCO DataSynapse GridServer Manager

  • unspecified to ≤ 5.1.3affected
  • 6.0.0affected
  • 6.0.1affected
  • 6.0.2affected
  • 6.1.0affected
  • 6.1.1affected
  • 6.2.0affected

References