Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

9 records

TI-2024-04259 CVE-2024-4576 · GHSA-rf6j-jvpp-wpg9

TIBCO EBX File Inclusion Vulnerability

Priority LOW 25

The component listed above contains a vulnerability that allows an attacker to traverse directories and access sensitive files, leading to unauthorized disclosure of system configuration and potentially sensitive informa…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00474 Published 2024-06-13 No fix listed CWE-22
Priority LOW 38

The Web Application component of TIBCO Software Inc.'s TIBCO EBX and TIBCO Product and Service Catalog powered by TIBCO EBX contains an easily exploitable vulnerability that allows a low privileged attacker with network…

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.00468 Published 2023-11-14 No fix listed CWE-79
Priority LOW 38

The Web Application component of TIBCO Software Inc.'s TIBCO EBX and TIBCO Product and Service Catalog powered by TIBCO EBX contains an easily exploitable vulnerability that allows a low privileged attacker with network…

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.00398 Published 2023-02-22 No fix listed CWE-79
TI-2022-12723 CVE-2022-30577 · GHSA-3qhw-7jqw-3rwp

TIBCO EBX Stored XSS vulnerability

Priority MEDIUM 40

The Web Server component of TIBCO Software Inc.'s TIBCO EBX contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute Stored Cross Site Scripting (XSS) on the affec…

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00856 Published 2022-09-21 No fix listed CWE-79
TI-2022-07018 CVE-2022-22769 · GHSA-v9xg-xqj3-g2w8

TIBCO EBX vulnerabilities

Priority MEDIUM 40

The Web server component of TIBCO Software Inc.'s TIBCO EBX, TIBCO EBX, TIBCO EBX, TIBCO EBX Add-ons, TIBCO EBX Add-ons, TIBCO EBX Add-ons, and TIBCO Product and Service Catalog powered by TIBCO EBX contains an easily ex…

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00866 Published 2022-01-19 No fix listed CWE-79
TI-2021-14236 CVE-2021-35498 · GHSA-9v4m-78rp-fgv2

TIBCO EBX Insecure Login Mechanism

Priority MEDIUM 45

The TIBCO EBX Web Server component of TIBCO Software Inc.'s TIBCO EBX, TIBCO EBX, TIBCO EBX, and TIBCO Product and Service Catalog powered by TIBCO EBX contains a vulnerability that under certain specific conditions allo…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01313 Published 2021-10-13 No fix listed CWE-521
TI-2021-06009 CVE-2021-23271 · GHSA-cxjj-qqpm-cpcq

TIBCO EBX Cross Site Scripting (XSS)

Priority LOW 37

The TIBCO EBX Web Server component of TIBCO Software Inc.'s TIBCO EBX contains a vulnerability that theoretically allows a low privileged attacker with network access to execute a Stored Cross Site Scripting (XSS) attack…

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00933 Published 2021-02-02 No fix listed CWE-79
Priority LOW 26

The Web server component of TIBCO Software Inc.'s TIBCO EBX contains a vulnerability that theoretically allows authenticated users to perform stored cross-site scripting (XSS) attacks.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00678 Published 2020-02-19 No fix listed CWE-79
Priority MEDIUM 43

The Web server component of TIBCO Software Inc.'s TIBCO EBX contains multiple vulnerabilities that theoretically allow authenticated users to perform stored cross-site scripting (XSS) attacks, and unauthenticated users t…

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00968 Published 2019-11-12 No fix listed CWE-79