CVE-2022-22775

Name of the Vulnerable Software and Affected Versions TIBCO BPM Enterprise versions 4.3.1 and below TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric versions 4.3.1 and below

Description The Workspace client component of TIBCO Software Inc.'s TIBCO BPM Enterprise and TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric contains difficult to exploit Reflected Cross Site Scripting (XSS) vulnerabilities. These vulnerabilities allow low privileged attackers with network access to execute scripts targeting the affected system or the victim's local system.

Recommendations For TIBCO BPM Enterprise versions 4.3.1 and below, update to a version above 4.3.1 to resolve the issue. For TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric versions 4.3.1 and below, update to a version above 4.3.1 to resolve the issue. As a temporary workaround, consider restricting access to the Workspace client component to minimize the risk of exploitation.