CVE-2022-22777
TIBCO BusinessConnect Trading Community Management Reflected Cross Site Scripting Vulnerability
- State
- Published
- Severity
- 6.1 Medium
- Published
- May 18, 2022
- Updated
- Sep 16, 2024
- Reserved
- Jan 7, 2022
Description
The Web Server component of TIBCO Software Inc.'s TIBCO BusinessConnect Trading Community Management contains easily exploitable Reflected Cross Site Scripting (XSS) vulnerabilities that allow an unauthenticated attacker with network access to execute scripts targeting the affected system or the victim's local system. Affected releases are TIBCO Software Inc.'s TIBCO BusinessConnect Trading Community Management: versions 6.1.0 and below.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 6.1 Medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N | tibco |
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
TIBCO BusinessConnect Trading Community ManagementTIBCO Software Inc. |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.