PT-2022-20180

Name of the Vulnerable Software and Affected Versions TIBCO iWay Service Manager versions 8.0.6 and below Description The iWay Service Manager Console component of TIBCO Software Inc.'s TIBCO iWay Service Manager contains a Directory Traversal vulnerability that allows a low privileged attacker...

CVE-2022-30572: Improper Limitation of a Pathname to a Restricted Directory

The iWay Service Manager Console component of TIBCO Software Inc.'s TIBCO iWay Service Manager contains an easily exploitable Directory Traversal vulnerability that allows a low privileged attacker with network access to read arbitrary resources on the affected system. Affected releases are TIBCO...

CVE-2022-30571: Improper Neutralization of Input During Web Page Generation

The iWay Service Manager Console component of TIBCO Software Inc.'s TIBCO iWay Service Manager contains easily exploitable Reflected Cross Site Scripting XSS vulnerabilities that allow a low privileged attacker with network access to execute scripts targeting the affected system or the victim's...