What’s Vulnerable › Vulnerabilities

CVE-2019-11212: TIBCO MDM Exposes Cross-Site Scripting Vulnerabilities

• Severity: medium (CVSS 5.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-10-09 · updated 2026-06-17
• Weakness: CWE-79

Description

The MDM server component of TIBCO Software Inc's TIBCO MDM contains multiple vulnerabilities that theoretically allow an authenticated user with specific roles to perform cross-site scripting (XSS) attacks. This issue affects TIBCO Software Inc.'s TIBCO MDM version 9.0.1 and prior versions; version 9.1.0.

Affected products

• TIBCO Master Data Management: through 9.0.1; 9.1.0

References

• http://www.tibco.com/services/support/advisories
• https://www.tibco.com/support/advisories/2019/10/tibco-security-advisory-october-8-2019-tibco-mdm
• http://www.tibco.com/services/support/advisories
• https://www.tibco.com/support/advisories/2019/10/tibco-security-advisory-october-8-2019-tibco-mdm

Get alerted when CVE-2019-11212 or the next vulnerability affects your stack