Riskcovery

CVE-2022-22769

TIBCO EBX vulnerabilities

State
Published
Severity
8.0 High
Published
Jan 19, 2022
Updated
Sep 17, 2024
Reserved
Jan 7, 2022

Read the record on cve.org

Description

The Web server component of TIBCO Software Inc.'s TIBCO EBX, TIBCO EBX, TIBCO EBX, TIBCO EBX Add-ons, TIBCO EBX Add-ons, TIBCO EBX Add-ons, and TIBCO Product and Service Catalog powered by TIBCO EBX contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute Stored Cross Site Scripting (XSS) on the affected system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO EBX: versions 5.8.124 and below, TIBCO EBX: versions 5.9.3, 5.9.4, 5.9.5, 5.9.6, 5.9.7, 5.9.8, 5.9.9, 5.9.10, 5.9.11, 5.9.12, 5.9.13, 5.9.14, and 5.9.15, TIBCO EBX: versions 6.0.0, 6.0.1, 6.0.2, and 6.0.3, TIBCO EBX Add-ons: versions 3.20.18 and below, TIBCO EBX Add-ons: versions 4.1.0, 4.2.0, 4.2.1, 4.2.2, 4.3.0, 4.3.1, 4.3.2, 4.3.3, 4.3.4, 4.4.0, 4.4.1, 4.4.2, 4.4.3, 4.5.0, 4.5.1, 4.5.2, 4.5.3, 4.5.4, 4.5.5, and 4.5.6, TIBCO EBX Add-ons: versions 5.0.0, 5.0.1, 5.1.0, 5.1.1, and 5.2.0, and TIBCO Product and Service Catalog powered by TIBCO EBX: versions 1.1.0 and below.

Scores

CVSSScoreVectorSource
3.18.0 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:Htibco

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
TIBCO EBXTIBCO Software Inc.
  • 5.8.124 and earlierAffected
TIBCO EBXTIBCO Software Inc.
  • 5.9.3Affected
  • 5.9.4Affected
  • 5.9.5Affected
  • 5.9.6Affected
  • 5.9.7Affected
  • 5.9.8Affected
  • 5.9.9Affected
  • 5.9.10Affected
  • 5.9.11Affected
  • 5.9.12Affected
  • 5.9.13Affected
  • 5.9.14Affected
  • 5.9.15Affected
TIBCO EBXTIBCO Software Inc.
  • 6.0.0Affected
  • 6.0.1Affected
  • 6.0.2Affected
  • 6.0.3Affected
TIBCO EBX Add-onsTIBCO Software Inc.
  • 3.20.18 and earlierAffected
TIBCO EBX Add-onsTIBCO Software Inc.
  • 4.1.0Affected
  • 4.2.0Affected
  • 4.2.1Affected
  • 4.2.2Affected
  • 4.3.0Affected
  • 4.3.1Affected
  • 4.3.2Affected
  • 4.3.3Affected
  • 4.3.4Affected
  • 4.4.0Affected
  • 4.4.1Affected
  • 4.4.2Affected
  • 4.4.3Affected
  • 4.5.0Affected
  • 4.5.1Affected
  • 4.5.2Affected
  • 4.5.3Affected
  • 4.5.4Affected
  • 4.5.5Affected
  • 4.5.6Affected
TIBCO EBX Add-onsTIBCO Software Inc.
  • 5.0.0Affected
  • 5.0.1Affected
  • 5.1.0Affected
  • 5.1.1Affected
  • 5.2.0Affected
TIBCO Product and Service Catalog powered by TIBCO EBXTIBCO Software Inc.
  • 1.1.0 and earlierAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.