Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

9 records

Vendor: TIBCO Component: Ebx Add-ons Clear all filters
TI-2023-11397 CVE-2023-26217 · GHSA-6hvj-j96w-8755

TIBCO EBX Add-ons SQL Injection Vulnerability

Priority MEDIUM 41

The Data Exchange Add-on component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an easily exploitable vulnerability that allows a low privileged user with import permissions and network access to the EBX server to…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00733 Published 2023-07-19 No fix listed CWE-89
TI-2023-11395 CVE-2023-26215 · GHSA-57r8-4369-33xg

TIBCO EBX® Add-ons Path Traversal

Priority LOW 35

The server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains a vulnerability that allows an attacker with low-privileged application access to read system files that are accessible to the web server.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00657 Published 2023-05-25 No fix listed CWE-203
TI-2023-11396 CVE-2023-26216 · GHSA-rrxj-c2rq-pqr4

TIBCO EBX Add-ons Arbitrary File Write

Priority MEDIUM 43

The server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an exploitable vulnerability that allows an attacker to upload files to a directory accessible by the web server.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00755 Published 2023-05-25 No fix listed CWE-22
TI-2022-19971 CVE-2022-41566 · GHSA-r589-frfj-qqhf

TIBCO EBX Add-ons Cross Site Scripting (XSS) Vulnerability

Priority LOW 38

The server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute stored XSS on the affected system.

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.00398 Published 2023-02-22 No fix listed CWE-79
TI-2022-12724 CVE-2022-30578 · GHSA-rjwp-g2qw-rcv6

TIBCO EBX Add-ons Stored XSS vulnerability

Priority MEDIUM 43

The Web Server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute Stored Cross Site Scripting (XSS) on t…

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.01057 Published 2022-09-21 No fix listed CWE-79
TI-2022-07018 CVE-2022-22769 · GHSA-v9xg-xqj3-g2w8

TIBCO EBX vulnerabilities

Priority MEDIUM 40

The Web server component of TIBCO Software Inc.'s TIBCO EBX, TIBCO EBX, TIBCO EBX, TIBCO EBX Add-ons, TIBCO EBX Add-ons, TIBCO EBX Add-ons, and TIBCO Product and Service Catalog powered by TIBCO EBX contains an easily ex…

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00866 Published 2022-01-19 No fix listed CWE-79
TI-2020-16499 CVE-2020-27148 · GHSA-x33g-fm74-m47v

TIBCO EBX EXML External Entity

Priority LOW 33

The TIBCO EBX Add-on for Oracle Hyperion EPM, TIBCO EBX Data Exchange Add-on, and TIBCO EBX Insight Add-on components of TIBCO Software Inc.'s TIBCO EBX Add-ons contain a vulnerability that theoretically allows a low pri…

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.01064 Published 2021-01-12 No fix listed CWE-611
TI-2019-12930 CVE-2019-17332 · GHSA-3q42-g7pm-w4xc

TIBCO EBX Add-on For Digital Asset Manager Cross-Site Scripting Vulnerabilities

Priority LOW 26

The Digital Asset Manager Web Interface component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains a vulnerability that theoretically allows authenticated users to perform stored cross-site scripting (XSS) attacks.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00717 Published 2019-11-12 No fix listed CWE-79
TI-2019-12929 CVE-2019-17331 · GHSA-mrhx-hcg2-5p6w

TIBCO EBX Add-on For Data Exchange Cross-Site Scripting Vulnerabilities

Priority LOW 25

The Data Exchange Web Interface component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains a vulnerability that theoretically allows authenticated users to perform stored cross-site scripting (XSS) attacks.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00609 Published 2019-11-12 No fix listed CWE-79