{"schemaVersion":3,"id":"CVE-2010-3491","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"The (1) ActiveMatrix Runtime and (2) ActiveMatrix Administrator components in TIBCO ActiveMatrix Service Grid before 2.3.1, ActiveMatrix Service Bus before 2.3.1, ActiveMatrix BusinessWorks Service Engine before 5.8.1, and ActiveMatrix Service Performance Manager before 1.3.2 do not properly handle JMX connections, which allows remote attackers to execute arbitrary code, obtain sensitive information, or cause a denial of service via unspecified vectors.","dates":{"published":"2010-10-26T18:00:00.000Z","modified":"2024-08-07T03:11:44.278Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":10,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":10,"severity":"high","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.04549,"percentile":0.9148,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.04549},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.04549,"percentile":0.9148}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.04549,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.04549,"percentile":0.9148}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-20","name":"Improper Input Validation","description":"The product receives input or data, but it does\n        not validate or incorrectly validates that the input has the\n        properties that are required to process the data safely and\n        correctly.","type":"weakness","status":"Stable","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/20.html"}],"affected":[{"vendor":"tibco","product":"activematrix_businessworks_service_engine","name":"activematrix businessworks service engine","label":"activematrix_businessworks_service_engine","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 5.8.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 5.8.0","eol":null,"hubHref":"/vendor/tibco/activematrix_businessworks_service_engine"},{"vendor":"tibco","product":"activematrix_service_bus","name":"activematrix service bus","label":"activematrix_service_bus","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 2.3.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 2.3.0","eol":null,"hubHref":"/vendor/tibco/activematrix_service_bus"},{"vendor":"tibco","product":"activematrix_service_grid","name":"activematrix service grid","label":"activematrix_service_grid","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 2.3.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 2.3.0","eol":null,"hubHref":"/vendor/tibco/activematrix_service_grid"},{"vendor":"tibco","product":"activematrix_service_performance_manager","name":"activematrix service performance manager","label":"activematrix_service_performance_manager","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 1.3.1","eol":null,"hubHref":"/vendor/tibco/activematrix_service_performance_manager"}],"affectedCount":4,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://www.securityfocus.com/bid/44254","label":"www.securityfocus.com/bid/44254","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID"]},{"url":"http://secunia.com/advisories/41891","label":"secunia.com/advisories/41891","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://www.tibco.com/services/support/advisories/activematrix-advisory_20101019.jsp","label":"www.tibco.com/services/support/advisories/activematrix-advisory_20101019.jsp","hostname":"www.tibco.com","tags":["X Refsource CONFIRM","Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/2747","label":"www.vupen.com/english/advisories/2010/2747","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/62674","label":"exchange.xforce.ibmcloud.com/vulnerabilities/62674","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF"]},{"url":"http://www.tibco.com/multimedia/activematrix_advisory_tcm8-12488.txt","label":"www.tibco.com/multimedia/activematrix_advisory_tcm8-12488.txt","hostname":"www.tibco.com","tags":["X Refsource CONFIRM","Vendor Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2010-10-26T18:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-07T03:11:44.278Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T07:51:07.527Z","stale":false,"partial":false}}