VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Apr 8, 2014· Updated May 6, 2026

CVE-2014-2542

CVE-2014-2542

Description

Cross-site scripting (XSS) vulnerability in the Rendezvous Daemon (rvd), Rendezvous Routing Daemon (rvrd), Rendezvous Secure Daemon (rvsd), and Rendezvous Secure Routing Daemon (rvsrd) in TIBCO Rendezvous before 8.4.2, Messaging Appliance before 8.7.1, and Substation ES before 2.8.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

12
  • TIBCO Software/Rendezvous10 versions
    cpe:2.3:a:tibco:rendezvous:7.4.11:*:*:*:*:*:*:*+ 9 more
    • cpe:2.3:a:tibco:rendezvous:7.4.11:*:*:*:*:*:*:*
    • cpe:2.3:a:tibco:rendezvous:7.5.1:*:*:*:*:*:*:*
    • cpe:2.3:a:tibco:rendezvous:7.5.2:*:*:*:*:*:*:*
    • cpe:2.3:a:tibco:rendezvous:7.5.3:*:*:*:*:*:*:*
    • cpe:2.3:a:tibco:rendezvous:7.5.4:*:*:*:*:*:*:*
    • cpe:2.3:a:tibco:rendezvous:8.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:tibco:rendezvous:8.3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:tibco:rendezvous:8.3.1:*:*:*:*:*:*:*
    • cpe:2.3:a:tibco:rendezvous:8.10:*:*:*:*:*:*:*
    • cpe:2.3:a:tibco:rendezvous:*:*:*:*:*:*:*:*range: <=8.4.1
  • TIBCO Software/Substantiation Es
    cpe:2.3:a:tibco:substantiation_es:*:*:*:*:*:*:*:*
    Range: <=2.8.0
  • TIBCO Software/Messaging Appliance
    cpe:2.3:h:tibco:messaging_appliance:*:*:*:*:*:*:*:*
    Range: <=8.7.0

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

5

News mentions

0

No linked articles in our index yet.