CVE-2022-30571

TIBCO iWay Service Manager Reflected Cross Site Scripting (XSS) Vulnerability

High · published August 2, 2022

CVSS v3.1
8.1
EPSS
1%
Percentile
43.1
In the wild
Unconfirmed
What it is

The iWay Service Manager Console component of TIBCO Software Inc.'s TIBCO iWay Service Manager contains easily exploitable Reflected Cross Site Scripting (XSS) vulnerabilities that allow a low privileged attacker with network access to execute scripts targeting the affected system or the victim's local system. Affected releases are TIBCO Software Inc.'s TIBCO iWay Service Manager: versions 8.0.6 and below.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00517 · 43.1th percentile
Published
2022-08-02T16:50Z
EPSS history
Timeline
  • 02 AUG 16:50Z
    TIBCO iWay Service Manager Reflected Cross Site Scripting (XSS) Vulnerability
    cvelistv5