CVE-2019-17333
8
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Summary
The Web server component of TIBCO Software Inc.'s TIBCO EBX contains a vulnerability that theoretically allows authenticated users to perform stored cross-site scripting (XSS) attacks. Affected releases are TIBCO Software Inc.'s TIBCO EBX: versions 5.8.1.fixS and below, versions 5.9.3, 5.9.4, 5.9.5, 5.9.6, and 5.9.7.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| TIBCO Software Inc. | TIBCO EBX | unspecified <= 5.8.1.fixS | affected |
| TIBCO Software Inc. | TIBCO EBX | 5.9.3 | affected |
| TIBCO Software Inc. | TIBCO EBX | 5.9.4 | affected |
| TIBCO Software Inc. | TIBCO EBX | 5.9.5 | affected |
| TIBCO Software Inc. | TIBCO EBX | 5.9.6 | affected |
| TIBCO Software Inc. | TIBCO EBX | 5.9.7 | affected |
Weaknesses
- The impact of these vulnerabilities includes the theoretical possibility that an attacker could gain full administrative access to the web interface of the affected component.
ADP Enrichment
CVE Program Container
Additional References
- http://www.tibco.com/services/support/advisories
- https://www.tibco.com/support/advisories/2020/02/tibco-security-advisory-february-19-2020-tibco-ebx
References
- http://www.tibco.com/services/support/advisories
- https://www.tibco.com/support/advisories/2020/02/tibco-security-advisory-february-19-2020-tibco-ebx
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.