CVE-2022-41565

  1. Reconshell
  2. Vulnerabilities (CVE)
  3. CVE-2022-41565
The Web Application component of TIBCO Software Inc.'s TIBCO EBX and TIBCO Product and Service Catalog powered by TIBCO EBX contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute a stored XSS on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO EBX: versions 5.9.21 and below, versions 6.0.11 and below and TIBCO Product and Service Catalog powered by TIBCO EBX: versions 1.2.0 and below.

5.4 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.3 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References
Link Resource
https://www.tibco.com/services/support/advisories Vendor Advisory
Advertisement

NeevaHost hosting service
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:tibco:product_and_service_catalog_powered_by_tibco_ebx:*:*:*:*:*:*:*:*
cpe:2.3:a:tibco:ebx:*:*:*:*:*:*:*:*
cpe:2.3:a:tibco:ebx:*:*:*:*:*:*:*:*
Information

Published : 2023-02-22 10:15

Updated : 2023-03-02 10:25

NVD link : CVE-2022-41565

Mitre link : CVE-2022-41565

JSON object : View

CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Advertisement

dedicated server usa
Products Affected

tibco

  • product_and_service_catalog_powered_by_tibco_ebx
  • ebx