HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2022-22769

CVSS 8.0v3.1pub. 2022-01-19upd. 2024-11-21

The Web server component of TIBCO Software Inc.'s TIBCO EBX, TIBCO EBX, TIBCO EBX, TIBCO EBX Add-ons, TIBCO EBX Add-ons, TIBCO EBX Add-ons, and TIBCO Product and Service Catalog powered by TIBCO EBX contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute Stored Cross Site Scripting (XSS) on the affected system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO EBX: versions 5.8.124 and below, TIBCO EBX: versions 5.9.3, 5.9.4, 5.9.5, 5.9.6, 5.9.7, 5.9.8, 5.9.9, 5.9.10, 5.9.11, 5.9.12, 5.9.13, 5.9.14, and 5.9.15, TIBCO EBX: versions 6.0.0, 6.0.1, 6.0.2, and 6.0.3, TIBCO EBX Add-ons: versions 3.20.18 and below, TIBCO EBX Add-ons: versions 4.1.0, 4.2.0, 4.2.1, 4.2.2, 4.3.0, 4.3.1, 4.3.2, 4.3.3, 4.3.4, 4.4.0, 4.4.1, 4.4.2, 4.4.3, 4.5.0, 4.5.1, 4.5.2, 4.5.3, 4.5.4, 4.5.5, and 4.5.6, TIBCO EBX Add-ons: versions 5.0.0, 5.0.1, 5.1.0, 5.1.1, and 5.2.0, and TIBCO Product and Service Catalog powered by TIBCO EBX: versions 1.1.0 and below.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
  • Tibco Ebx

    APP
    Tibco
    5.9.105.9.115.9.125.9.135.9.145.9.155.9.35.9.45.9.55.9.65.9.75.9.85.9.96.0.06.0.1+ 3 więcej
  • Tibco Ebx Add Ons

    APP
    Tibco
    4.1.04.2.04.2.14.2.24.3.04.3.14.3.24.3.34.3.44.4.04.4.14.4.24.4.34.5.04.5.1+ 11 więcej
  • Tibco Product And Service Catalog Powered By Tibco Ebx

    APP
    Tibco
    < 1.2.0
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
XSS
CWE
References

Related vulnerabilities

CVE-2023-26216CRITICAL9.1ten sam produkt

The server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an exploitable vulnerability that all...

CVE-2021-35498CRITICAL9.8ten sam produkt

The TIBCO EBX Web Server component of TIBCO Software Inc.'s TIBCO EBX, TIBCO EBX, TIBCO EBX, and TIBCO Product...

CVE-2019-17330CRITICAL9.6ten sam produkt

The Web server component of TIBCO Software Inc.'s TIBCO EBX contains multiple vulnerabilities that theoretical...

CVE-2023-26222HIGH8.7ten sam produkt

The Web Application component of TIBCO Software Inc.'s TIBCO EBX and TIBCO Product and Service Catalog powered...

CVE-2023-26217HIGH8.8ten sam produkt

The Data Exchange Add-on component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an easily exploitable v...