PT-2023-13992 · Tibco Software · Tibco Ebx Add-Ons
CVE-2022-41566
·
Published
2023-02-22
·
Updated
2023-03-02
CVSS v3.1
8.7
High
| Vector | AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
TIBCO EBX Add-ons versions 5.6.0 and below
Description
The server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains a vulnerability that allows a low privileged attacker with network access to execute stored XSS on the affected system.
Recommendations
For versions 5.6.0 and below, update to a version above 5.6.0 to resolve the issue. As a temporary workaround, consider restricting access to the server component to minimize the risk of exploitation.
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Tibco Ebx Add-Ons