TIBCO BusinessConnect Stored XSS Vulnerability
CVE-2022-41567

7.3HIGH

Key Information:

Vendor

Tibco
Status
Tibco Businessconnect
Vendor
CVE Published:
22 February 2023

What is CVE-2022-41567?

The TIBCO BusinessConnect UI component is susceptible to a cross-site scripting (XSS) vulnerability, which can be exploited by low privileged attackers with network access. This vulnerability allows unauthorized users to inject malicious scripts into the affected system, potentially compromising sensitive data and user interactions. Versions of TIBCO BusinessConnect including 7.3.0 and earlier are impacted, making it critical for users to evaluate and mitigate potential exploitation risks.

Affected Version(s)

TIBCO BusinessConnect <= 7.3.0

References

https://www.tibco.com/services/support/advisories

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.