CVE-2014-2542

Cross-site scripting (XSS) vulnerability in the Rendezvous Daemon (rvd), Rendezvous Routing Daemon (rvrd), Rendezvous Secure Daemon (rvsd), and Rendezvous Secure Routing Daemon (rvsrd) in TIBCO Rendezvous before 8.4.2, Messaging Appliance before 8.7.1, and Substation ES before 2.8.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:tibco:rendezvous:*:*:*:*:*:*:*:*
cpe:2.3:a:tibco:rendezvous:7.4.11:*:*:*:*:*:*:*
cpe:2.3:a:tibco:rendezvous:7.5.1:*:*:*:*:*:*:*
cpe:2.3:a:tibco:rendezvous:7.5.2:*:*:*:*:*:*:*
cpe:2.3:a:tibco:rendezvous:7.5.3:*:*:*:*:*:*:*
cpe:2.3:a:tibco:rendezvous:7.5.4:*:*:*:*:*:*:*
cpe:2.3:a:tibco:rendezvous:8.2.1:*:*:*:*:*:*:*
cpe:2.3:a:tibco:rendezvous:8.3.0:*:*:*:*:*:*:*
cpe:2.3:a:tibco:rendezvous:8.3.1:*:*:*:*:*:*:*
cpe:2.3:a:tibco:rendezvous:8.10:*:*:*:*:*:*:*
cpe:2.3:a:tibco:substantiation_es:*:*:*:*:*:*:*:*
cpe:2.3:h:tibco:messaging_appliance:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2014-04-08 23:47

Updated : 2024-02-04 18:35


NVD link : CVE-2014-2542

Mitre link : CVE-2014-2542

CVE.ORG link : CVE-2014-2542


JSON object : View

Products Affected

tibco

  • substantiation_es
  • messaging_appliance
  • rendezvous
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')