CVE-2019-17330
8.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Summary
The Web server component of TIBCO Software Inc.'s TIBCO EBX contains multiple vulnerabilities that theoretically allow authenticated users to perform stored cross-site scripting (XSS) attacks, and unauthenticated users to perform reflected cross-site scripting attacks. Affected releases are TIBCO Software Inc.'s TIBCO EBX: versions up to and including 5.8.1.fixR, versions 5.9.3, 5.9.4, 5.9.5, and 5.9.6.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| TIBCO Software Inc. | TIBCO EBX | unspecified <= 5.8.1.fixR | affected |
| TIBCO Software Inc. | TIBCO EBX | 5.9.3 | affected |
| TIBCO Software Inc. | TIBCO EBX | 5.9.4 | affected |
| TIBCO Software Inc. | TIBCO EBX | 5.9.5 | affected |
| TIBCO Software Inc. | TIBCO EBX | 5.9.6 | affected |
Weaknesses
- The impact of these vulnerabilities includes the theoretical possibility that an attacker could gain full administrative access to the web interface of the affected component.
ADP Enrichment
CVE Program Container
Additional References
- http://www.tibco.com/services/support/advisories
- https://www.tibco.com/support/advisories/2019/11/tibco-security-advisory-november-12-2019-tibco-ebx-2019-17330
References
- http://www.tibco.com/services/support/advisories
- https://www.tibco.com/support/advisories/2019/11/tibco-security-advisory-november-12-2019-tibco-ebx-2019-17330
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.