What’s Vulnerable › Vulnerabilities

CVE-2010-3491

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2010-10-26 · updated 2026-06-16
• Weakness: CWE-20

Description

The (1) ActiveMatrix Runtime and (2) ActiveMatrix Administrator components in TIBCO ActiveMatrix Service Grid before 2.3.1, ActiveMatrix Service Bus before 2.3.1, ActiveMatrix BusinessWorks Service Engine before 5.8.1, and ActiveMatrix Service Performance Manager before 1.3.2 do not properly handle JMX connections, which allows remote attackers to execute arbitrary code, obtain sensitive information, or cause a denial of service via unspecified vectors.

Affected products

• TIBCO Activematrix Businessworks Service Engine: through 5.8.0
• TIBCO Activematrix Service Bus: through 2.3.0
• TIBCO Activematrix Service Grid: through 2.3.0
• TIBCO Activematrix Service Performance Manager: through 1.3.1

References

• http://secunia.com/advisories/41891
• http://www.securityfocus.com/bid/44254
• http://www.tibco.com/multimedia/activematrix_advisory_tcm8-12488.txt
• http://www.tibco.com/services/support/advisories/activematrix-advisory_20101019.jsp
• http://www.vupen.com/english/advisories/2010/2747
• https://exchange.xforce.ibmcloud.com/vulnerabilities/62674
• http://secunia.com/advisories/41891
• http://www.securityfocus.com/bid/44254
• http://www.tibco.com/multimedia/activematrix_advisory_tcm8-12488.txt
• http://www.tibco.com/services/support/advisories/activematrix-advisory_20101019.jsp
• http://www.vupen.com/english/advisories/2010/2747
• https://exchange.xforce.ibmcloud.com/vulnerabilities/62674

Get alerted when CVE-2010-3491 or the next vulnerability affects your stack