{"api_version":"1","generated_at":"2026-07-23T22:21:22+00:00","cve":"CVE-2011-3423","urls":{"html":"https://cve.report/CVE-2011-3423","api":"https://cve.report/api/cve/CVE-2011-3423.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2011-3423","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2011-3423"},"summary":{"title":"CVE-2011-3423","description":"Cross-site scripting (XSS) vulnerability in the Managed File Transfer server in TIBCO Managed File Transfer Internet Server before 7.1.1 and Managed File Transfer Command Center before 7.1.1, and the server in TIBCO Slingshot before 1.8.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.","state":"PUBLISHED","assigner":"mitre","published_at":"2011-09-19 12:02:57","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-79","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.tibco.com/services/support/advisories/mft-slingshot-advisory_20110913.jsp","name":"http://www.tibco.com/services/support/advisories/mft-slingshot-advisory_20110913.jsp","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"TIBCO | TIBCO® Managed File Transfer Internet Server, TIBCO® Managed File Transfer Command Center, TIBCO® Slingshot","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"http://secunia.com/advisories/45976","name":"http://secunia.com/advisories/45976","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"TIBCO Managed File Transfer Products Cross-Site Scripting and Session Fixation Vulnerabilities - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securitytracker.com/id?1026051","name":"http://securitytracker.com/id?1026051","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityTracker: TIBCO Slingshot Bugs Permit Cross-Site Scripting and Session Hijacking Attacks","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/49619","name":"http://www.securityfocus.com/bid/49619","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"TIBCO Managed File Transfer Products Session Fixation and Cross Site Scripting Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.osvdb.org/75396","name":"http://www.osvdb.org/75396","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.tibco.com/multimedia/mft-slingshot_advisory_20110913_tcm8-14340.txt","name":"http://www.tibco.com/multimedia/mft-slingshot_advisory_20110913_tcm8-14340.txt","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"404 Not Found","mime":"text/plain","httpstatus":"404","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/69806","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/69806","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-3423","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-3423","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2011","cve_id":"3423","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tibco","cpe5":"managed_file_transfer_command_center","cpe6":"6.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"3423","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tibco","cpe5":"managed_file_transfer_command_center","cpe6":"7.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"3423","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tibco","cpe5":"managed_file_transfer_command_center","cpe6":"7.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"3423","vulnerable":"1","versionEndIncluding":"7.1.0","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tibco","cpe5":"managed_file_transfer_command_center","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"3423","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tibco","cpe5":"managed_file_transfer_internet_server","cpe6":"6.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"3423","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tibco","cpe5":"managed_file_transfer_internet_server","cpe6":"7.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"3423","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tibco","cpe5":"managed_file_transfer_internet_server","cpe6":"7.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"3423","vulnerable":"1","versionEndIncluding":"7.1.0","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tibco","cpe5":"managed_file_transfer_internet_server","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"3423","vulnerable":"1","versionEndIncluding":"1.8.0","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tibco","cpe5":"slingshot","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T23:37:47.673Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"45976","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/45976"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.tibco.com/services/support/advisories/mft-slingshot-advisory_20110913.jsp"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.tibco.com/multimedia/mft-slingshot_advisory_20110913_tcm8-14340.txt"},{"name":"1026051","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1026051"},{"name":"49619","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/49619"},{"name":"managed-file-unspecified-xss(69806)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/69806"},{"name":"75396","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/75396"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2011-09-13T00:00:00.000Z","descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Managed File Transfer server in TIBCO Managed File Transfer Internet Server before 7.1.1 and Managed File Transfer Command Center before 7.1.1, and the server in TIBCO Slingshot before 1.8.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-08-28T12:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"45976","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/45976"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.tibco.com/services/support/advisories/mft-slingshot-advisory_20110913.jsp"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.tibco.com/multimedia/mft-slingshot_advisory_20110913_tcm8-14340.txt"},{"name":"1026051","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1026051"},{"name":"49619","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/49619"},{"name":"managed-file-unspecified-xss(69806)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/69806"},{"name":"75396","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/75396"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2011-3423","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Cross-site scripting (XSS) vulnerability in the Managed File Transfer server in TIBCO Managed File Transfer Internet Server before 7.1.1 and Managed File Transfer Command Center before 7.1.1, and the server in TIBCO Slingshot before 1.8.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"45976","refsource":"SECUNIA","url":"http://secunia.com/advisories/45976"},{"name":"http://www.tibco.com/services/support/advisories/mft-slingshot-advisory_20110913.jsp","refsource":"CONFIRM","url":"http://www.tibco.com/services/support/advisories/mft-slingshot-advisory_20110913.jsp"},{"name":"http://www.tibco.com/multimedia/mft-slingshot_advisory_20110913_tcm8-14340.txt","refsource":"CONFIRM","url":"http://www.tibco.com/multimedia/mft-slingshot_advisory_20110913_tcm8-14340.txt"},{"name":"1026051","refsource":"SECTRACK","url":"http://securitytracker.com/id?1026051"},{"name":"49619","refsource":"BID","url":"http://www.securityfocus.com/bid/49619"},{"name":"managed-file-unspecified-xss(69806)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/69806"},{"name":"75396","refsource":"OSVDB","url":"http://www.osvdb.org/75396"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2011-3423","datePublished":"2011-09-17T10:00:00.000Z","dateReserved":"2011-09-12T00:00:00.000Z","dateUpdated":"2024-08-06T23:37:47.673Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2011-09-19 12:02:57","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-79","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:managed_file_transfer_command_center:*:*:*:*:*:*:*:*","versionEndIncluding":"7.1.0","matchCriteriaId":"E930A722-AF77-41A8-BC3A-3A62A893A4F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:managed_file_transfer_command_center:6.7:*:*:*:*:*:*:*","matchCriteriaId":"38ED1A3D-E9D9-4303-B415-B59E001AF66C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:managed_file_transfer_command_center:7.0:*:*:*:*:*:*:*","matchCriteriaId":"B915038A-19CD-46FA-AD4D-363FC1318BC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:managed_file_transfer_command_center:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"17F7866F-CA3B-473B-B97C-708094FA1FE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:managed_file_transfer_internet_server:*:*:*:*:*:*:*:*","versionEndIncluding":"7.1.0","matchCriteriaId":"C273EFE4-041D-4BE6-AD39-3AD18F2041A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:managed_file_transfer_internet_server:6.7:*:*:*:*:*:*:*","matchCriteriaId":"CEF0D77C-384A-4637-A536-FFFEB98FA5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:managed_file_transfer_internet_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"FF267842-78F2-4116-B9C2-AFC253FFC6D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:managed_file_transfer_internet_server:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6E9A0D38-D999-43F7-87D2-A94B1783BA03"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:slingshot:*:*:*:*:*:*:*:*","versionEndIncluding":"1.8.0","matchCriteriaId":"6ECCFBCC-8AAF-4058-ACDF-FF38B6A0EAD3"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2011","CveId":"3423","Ordinal":"1","Title":"CVE-2011-3423","CVE":"CVE-2011-3423","Year":"2011"},"notes":[{"CveYear":"2011","CveId":"3423","Ordinal":"1","NoteData":"Cross-site scripting (XSS) vulnerability in the Managed File Transfer server in TIBCO Managed File Transfer Internet Server before 7.1.1 and Managed File Transfer Command Center before 7.1.1, and the server in TIBCO Slingshot before 1.8.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.","Type":"Description","Title":"CVE-2011-3423"},{"CveYear":"2011","CveId":"3423","Ordinal":"2","NoteData":"2011-09-17","Type":"Other","Title":"Published"},{"CveYear":"2011","CveId":"3423","Ordinal":"3","NoteData":"2017-08-28","Type":"Other","Title":"Modified"}]}}}