CVE-2011-2020

Cross-site scripting (XSS) vulnerability in TIBCO iProcess Engine before 11.1.3 and iProcess Workspace before 11.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

• CWE-79

• http://osvdb.org/72553
• http://secunia.com/advisories/44639Vendor Advisory
• http://www.securityfocus.com/bid/47921
• http://www.tibco.com/multimedia/iprocess_advisory_20110518_tcm8-13710.txtVendor Advisory
• http://www.tibco.com/services/support/advisories/iprocess-advisory_20110518.jspVendor Advisory
• http://www.vupen.com/english/advisories/2011/1272Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/67537
• http://osvdb.org/72553
• http://secunia.com/advisories/44639Vendor Advisory
• http://www.securityfocus.com/bid/47921
• http://www.tibco.com/multimedia/iprocess_advisory_20110518_tcm8-13710.txtVendor Advisory
• http://www.tibco.com/services/support/advisories/iprocess-advisory_20110518.jspVendor Advisory
• http://www.vupen.com/english/advisories/2011/1272Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/67537

Published

May 20, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-2014The LDAP over SSL (aka LDAPS) implementation in Active Direc…
• CVE-2011-2015Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2011-2016Untrusted search path vulnerability in Windows Mail and Wind…7.3
• CVE-2011-2017Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2011-2018The kernel in Microsoft Windows XP SP2 and SP3, Windows Serv…
• CVE-2011-2019Untrusted search path vulnerability in Microsoft Internet Ex…
• CVE-2011-2021Session fixation vulnerability in TIBCO iProcess Engine befo…
• CVE-2011-2022The agp_generic_remove_memory function in drivers/char/agp/g…
• CVE-2011-2023Cross-site scripting (XSS) vulnerability in functions/mime.p…
• CVE-2011-2024Cisco Network Registrar before 7.2 has a default administrat…
• CVE-2011-2039The helper application in Cisco AnyConnect Secure Mobility C…
• CVE-2011-2040The helper application in Cisco AnyConnect Secure Mobility C…