CVE:CVE-2010-4497
CNNVD:CNNVD-201101-050
TIBCO Collaborative Information Manager 8.1.0之前版本以及ActiveCatalog 1.0.1之前版本中使用的Collaborative Information Manager服务器中存在跨站脚本攻击漏洞。远程攻击者可以借助未明向量注入任意web脚本或者HTML。
solution:Upgrade tibco activecatalog to a higher version than 1.0,and avoid the version (,1.0]; Upgrade tibco collaborative_information_manager to a higher version than 8.0,and avoid the version (,8.0]