CVE:CVE-2010-4496
CNNVD:CNNVD-201101-049
TIBCO Collaborative Information Manager 8.1.0之前版本以及ActiveCatalog 1.0.1之前版本中使用的Collaborative Information Manager服务器中存在多个SQL注入漏洞。某个未明输入还没有经过正确过滤就被用于SQL查询，远程攻击者可以借助未明向量执行任意SQL命令。
solution:Upgrade tibco activecatalog to a higher version than 1.0,and avoid the version (,1.0]; Upgrade tibco collaborative_information_manager to a higher version than 8.0,and avoid the version (,8.0]