CVE-2014-2542
Beschrijving NL
Cross-site scripting (XSS) -kwetsbaarheid in de Rendezvous Daemon (rvd), Rendezvous Routing Daemon (rvrd), Rendezvous Secure Daemon (rvsd) en Rendezvous Secure Routing Daemon (rvsrd) in Tibco Rendezvous vóór 8.4.2, Messaging Appliance vóór 8.7.1 en Substation ES vóór 2.8.1 stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via niet-gespecificeerde vectoren.
Origineel (Engels) tonen
Cross-site scripting (XSS) vulnerability in the Rendezvous Daemon (rvd), Rendezvous Routing Daemon (rvrd), Rendezvous Secure Daemon (rvsd), and Rendezvous Secure Routing Daemon (rvsrd) in TIBCO Rendezvous before 8.4.2, Messaging Appliance before 8.7.1, and Substation ES before 2.8.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.