TIBCO Iprocess Workspace vulnerabilities

2 CVEs affecting TIBCO Iprocess Workspace, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2011-2021, published 2011-05-20.

More from TIBCO.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2011-2021, published 2011-05-20. Medium severity, CVSS 4.3. EPSS: 2% chance of exploitation in the next 30 days. Session fixation vulnerability in TIBCO iProcess Engine before 11.1.3 and iProcess Workspace before 11.3.1 allows remote attackers to hijack web sessions via unspecified vectors.
• CVE-2011-2020, published 2011-05-20. Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in TIBCO iProcess Engine before 11.1.3 and iProcess Workspace before 11.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified…