CVE-2022-22769

The CVE-2022-22769 entry concerns the Web server component of TIBCO EBX and related Add-ons/Product and Service Catalog. A stored cross-site scripting (XSS) vulnerability allows a low-privileged attacker with network access to execute scripts on the affected system, with human interaction require...

CVE-2024-4576

Summary for CVE-2024-4576 : A directory traversal vulnerability in TIBCO EBX, affecting EBX Add-ons across multiple versions. The issue allows an attacker to access sensitive files and potentially disclose system configuration data. Root cause: directory traversal in EBX Add-ons components, enabl...

CVE-2023-26222

CVE-2023-26222 affects TIBCO EBX Web Application: stored XSS allowing a low-privileged, network-access attacker to execute scripts on the affected system. Affected releases: TIBCO EBX 5.9.22 and below; 6.0.13 and below; TIBCO Product and Service Catalog powered by TIBCO EBX 5.0.0 and below. Impac...

CVE-2019-17330

The CVE-2019-17330 issue affects TIBCO EBX Web Server, where authenticated users can trigger stored XSS and unauthenticated users can trigger reflected XSS. Affected releases include EBX versions up to 5.8.1.fixR and 5.9.3–5.9.6. The underlying problem is input validation/sanitization in the web ...

CVE-2019-17333

CVE-2019-17333 affects TIBCO EBX Web server: authenticated users may trigger stored XSS in versions 5.8.1.fixS and below, and 5.9.3–5.9.7. The issue is due to the Web server component vulnerability described in the TIBCO advisory, with CVSS v3 base score up to 8.0 (HIGH). Remediation provided: up...

CVE-2022-41565

CVE-2022-41565 – TIBCO EBX XSS vulnerability : The Web Application component in TIBCO EBX and the Product/Service Catalog powered by EBX is vulnerable to a stored XSS that requires network access and a low-privilege attacker. Affected releases are: TIBCO EBX 5.9.21 and below; TIBCO EBX 6.0.11 and...

CVE-2021-35498

The CVE affects the TIBCO EBX Web Server component and describes an insecure login mechanism where, under certain conditions, an attacker can enter a non-legitimate password that is accepted as valid. Affected products and versions include TIBCO EBX: 5.8.123 and below; 5.9.3–5.9.14; 6.0.0–6.0.1; ...

CVE-2021-23271

The CVE-2021-23271 entry concerns TIBCO EBX Web Server (TIBCO EBX) with a Stored Cross Site Scripting (XSS) vulnerability. Affected are TIBCO EBX versions 5.9.12 and earlier. The issue can be triggered by a low-privileged attacker with network access to execute XSS on the target system. The provi...

CVE-2022-30577

The CVE-2022-30577 entry concerns TIBCO EBX, where the Web Server component on versions 6.0.0–6.0.8 is vulnerable to Stored XSS. The root cause details are not explicitly provided in the supplied documents, but the vulnerability is described as easily exploitable with network access and requires ...