Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in TIBCO iProcess Engine before 11.1.3 and iProcess Workspace before 11.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
TIBCO iProcess Engine和iProcess Workspace跨站脚本攻击漏洞
Vulnerability Description
TIBCO iProcess Engine 11.1.3之前版本和iProcess Workspace 11.3.1之前版本中存在跨站脚本攻击漏洞。该漏洞是由于某些未明输入在返回给用户之前没有经过正确过滤,远程攻击者可以利用该漏洞在受影响站点的用户浏览器会话中执行任意HTML和脚本代码。
CVSS Information
N/A
Vulnerability Type
N/A