CVE-2022-30577

TIBCO EBX Stored XSS vulnerability

High · published September 21, 2022

CVSS v3.1
8.0
EPSS
1%
Percentile
58.0
In the wild
Unconfirmed
What it is

The Web Server component of TIBCO Software Inc.'s TIBCO EBX contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute Stored Cross Site Scripting (XSS) on the affected system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO EBX: versions 6.0.0 through 6.0.8.

The record
Technical detail
CVSS v3.1
8.0 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00856 · 58.0th percentile
Published
2022-09-21T17:55Z
EPSS history
Timeline
  • 21 SEP 17:55Z
    TIBCO EBX Stored XSS vulnerability
    cvelistv5