CVE-2023-26214: Improper Neutralization of Input During Web Page Generation

The BusinessConnect UI component of TIBCO Software Inc.'s TIBCO BusinessConnect contains easily exploitable Reflected Cross Site Scripting XSS vulnerabilities that allow a low privileged attacker with network access to execute scripts targeting the affected system or the victim's local system...

CVE-2022-41567: Improper Neutralization of Input During Web Page Generation

The BusinessConnect UI component of TIBCO Software Inc.'s TIBCO BusinessConnect contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute a cross-site scripting XSS attack on the affected system. Affected releases are TIBCO Software Inc.'s...