CVE-2021-23272

TIBCO BPM Cross Site Scripting (XSS)

Medium · published January 26, 2021

CVSS v3.1
4.6
EPSS
1%
Percentile
43.4
In the wild
Unconfirmed
What it is

The Application Development Clients component of TIBCO Software Inc.'s TIBCO BPM Enterprise and TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric contains a vulnerability that theoretically allows a low privileged attacker with network access to execute a Cross Site Scripting (XSS) attack on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO BPM Enterprise: versions 4.3.0 and below and TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric: versions 4.3.0 and below.

The record
Technical detail
CVSS v3.1
4.6 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00521 · 43.4th percentile
Published
2021-01-26T18:15Z
EPSS history
Timeline
  • 26 JAN 18:15Z
    TIBCO BPM Cross Site Scripting (XSS)
    cvelistv5