High

DATE	CVE	VULNERABILITY TITLE	RISK
2011-01-07	CVE-2010-4498	Input Validation vulnerability in TIBCO Unspecified vulnerability in Collaborative Information Manager server, as used in TIBCO Collaborative Information Manager before 8.1.0 and ActiveCatalog before 1.0.1, allows remote attackers to modify data or obtain sensitive information via a crafted URL. network low complexity tibco	7.5
2011-01-07	CVE-2010-4496	SQL Injection vulnerability in Tibco Activecatalog and Collaborative Information Manager Multiple SQL injection vulnerabilities in Collaborative Information Manager server, as used in TIBCO Collaborative Information Manager before 8.1.0 and ActiveCatalog before 1.0.1, allow remote attackers to execute arbitrary SQL commands via unspecified vectors. network low complexity tibco CWE-89	7.5