CVE-2014-2542

Published: Apr 8, 2014Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the Rendezvous Daemon (rvd), Rendezvous Routing Daemon (rvrd), Rendezvous Secure Daemon (rvsd), and Rendezvous Secure Routing Daemon (rvsrd) in TIBCO Rendezvous before 8.4.2, Messaging Appliance before 8.7.1, and Substation ES before 2.8.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected (12)

Products: Tibco: Messaging Appliance, Rendezvous, Substantiation Es

3 products

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Tibco Messaging Appliance	Up to 8.7.0
Tibco Rendezvous	Up to 8.4.1
Tibco Rendezvous	Version 7.4.11
Tibco Rendezvous	Version 7.5.1
Tibco Rendezvous	Version 7.5.2
Tibco Rendezvous	Version 7.5.3
Tibco Rendezvous	Version 7.5.4
Tibco Rendezvous	Version 8.10
Tibco Rendezvous	Version 8.2.1
Tibco Rendezvous	Version 8.3.0
Tibco Rendezvous	Version 8.3.1
Tibco Substantiation Es	Up to 2.8.0