SHARE
TWEET

Untitled

a guest Dec 10th, 2017 403 Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. CVE-2017-16789: XSS Vulnerability Details
  2. ==========================================
  3.  
  4. [Vulnerability description]
  5. Cross-site scripting (XSS) vulnerability in Integration Matters nJAMS 3, as used in TIBCO BusinessWorks Process Monitor through 3.0.1.3 and other products, allows remote authenticated administrators to inject arbitrary web script or HTML via unspecified vectors.
  6.  
  7. ------------------------------------------
  8.  
  9. [Vulnerability Type]
  10. Cross Site Scripting (XSS)
  11.  
  12. ------------------------------------------
  13.  
  14. [Vendor of Product]
  15. Integration Matters
  16.  
  17. ------------------------------------------
  18.  
  19. [Affected Product Code Base]
  20. nJAMS - 3
  21. TIBCO BWPM - 3.0.1.3
  22.  
  23. ------------------------------------------
  24.  
  25. [Attack Type]
  26. Remote
  27.  
  28. ------------------------------------------
  29.  
  30. [Impact Code execution]
  31. true
  32.  
  33. ------------------------------------------
  34.  
  35. [Attack Vectors]
  36. An authenticated administrator can inject arbitrary JavaScript or HTML code in the users' management panel of the web interface. The malicious code will be triggered when the page is visited by another administrator.
  37.  
  38.  
  39. Cristhian
RAW Paste Data
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy. OK, I Understand
 
Top