CVE-2010-4499

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-01-07 · updated 2026-06-16

Description

Session fixation vulnerability in Collaborative Information Manager server, as used in TIBCO Collaborative Information Manager before 8.1.0 and ActiveCatalog before 1.0.1, allows remote attackers to hijack web sessions via unspecified vectors.

Affected products

TIBCO Activecatalog: through 1.0
TIBCO Collaborative Information Manager: through 8.0

References

http://osvdb.org/70374
http://secunia.com/advisories/42791
http://www.securityfocus.com/bid/45691
http://www.securitytracker.com/id?1024942
http://www.tibco.com/multimedia/cim_advisory_20110105_tcm8-12765.txt
http://www.tibco.com/services/support/advisories/cim-advisory_20100105.jsp
http://www.vupen.com/english/advisories/2011/0037
https://exchange.xforce.ibmcloud.com/vulnerabilities/64523
http://osvdb.org/70374
http://secunia.com/advisories/42791
http://www.securityfocus.com/bid/45691
http://www.securitytracker.com/id?1024942

Get alerted when CVE-2010-4499 or the next vulnerability affects your stack