CVE-2010-0683

MediumCVSS 6.0/10Last modified Jun 16, 2026

Description

Unspecified vulnerability in TIBRepoServer5.jar in TIBCO Administrator 5.4.0 through 5.6.0, when JMS transport is used, allows remote authenticated users to execute arbitrary code on all domain nodes via vectors related to leveraging administrative credentials.

Metrics

CVSS 2.0 6.0/10AV:N/AC:M/Au:S/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/38732Vendor Advisory
http://www.securityfocus.com/bid/38396
http://www.tibco.com/multimedia/security_advisory_administrator_tcm8-10685.txtPatch, Vendor Advisory
http://www.tibco.com/services/support/advisories/adminstrator-advisory_20100223.jspPatch, Vendor Advisory
http://www.vupen.com/english/advisories/2010/0463Vendor Advisory
http://secunia.com/advisories/38732Vendor Advisory
http://www.securityfocus.com/bid/38396
http://www.tibco.com/multimedia/security_advisory_administrator_tcm8-10685.txtPatch, Vendor Advisory
http://www.tibco.com/services/support/advisories/adminstrator-advisory_20100223.jspPatch, Vendor Advisory
http://www.vupen.com/english/advisories/2010/0463Vendor Advisory

Timeline

Published: Feb 25, 2010
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2010

CVE-2010-06843.5Cross-site scripting (XSS) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote authenticated users to in CVE-2010-06855.0The design of the dialplan functionality in Asterisk Open Source 1.2.x, 1.4.x, and 1.6.x; and Asterisk Business Edition B.x.x and C.x.x, whe CVE-2010-06867.5WebAccess in VMware VirtualCenter 2.0.2 and 2.5, VMware Server 2.0, and VMware ESX 3.0.3 and 3.5 allows remote attackers to leverage proxy-s CVE-2010-06889.3Stack-based buffer overflow in Orbital Viewer 1.04 allows user-assisted remote attackers to execute arbitrary code via a crafted (1) .orb or CVE-2010-068910.0The ExecuteExe method in the DVBSExeCall Control ActiveX control 1.0.0.1 in DVBSExeCall.ocx in DATEV Base System (aka Grundpaket Basis) allo CVE-2010-06907.5SQL injection vulnerability in index.php in CommodityRentals Video Games Rentals allows remote attackers to execute arbitrary SQL commands v CVE-2010-06917.5SQL injection vulnerability in druckansicht.php in JTL-Shop 2 allows remote attackers to execute arbitrary SQL commands via the s parameter.CVE-2010-06927.5SQL injection vulnerability in the IP-Tech JQuarks (com_jquarks) Component 0.2.3, and possibly earlier, for Joomla! allows remote attackers CVE-2010-06937.5SQL injection vulnerability in products.php in CommodityRentals Trade Manager Script allows remote attackers to execute arbitrary SQL comman CVE-2010-06947.5SQL injection vulnerability in the PerchaGallery (com_perchagallery) component before 1.5b for Joomla! allows remote attackers to execute ar CVE-2010-06954.3Cross-site scripting (XSS) vulnerability in pages/index.php in BASIC-CMS allows remote attackers to inject arbitrary web script or HTML via CVE-2010-06965.0Directory traversal vulnerability in includes/download.php in the JoomlaWorks AllVideos (Jw_allVideos) plugin 3.0 through 3.2 for Joomla! al