critical9.6
CVE-2019-17330
The Web server component of TIBCO Software Inc.'s TIBCO EBX contains multiple vulnerabilities that theoretically allow authenticated users to perform stored cr…
Impact
The Web server component of TIBCO Software Inc.'s TIBCO EBX contains multiple vulnerabilities that theoretically allow authenticated users to perform stored cross-site scripting (XSS) attacks, and unauthenticated users to perform reflected cross-site scripting attacks. Affected releases are TIBCO Software Inc.'s TIBCO EBX: versions up to and including 5.8.1.fixR, versions 5.9.3, 5.9.4, 5.9.5, and 5.9.6.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tibco | Ebx | through 5.8.1 Versions 5.8.1, 5.9.3, 5.9.4, 5.9.5, 5.9.6 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.tibco.com/services/support/advisories
- https://www.tibco.com/support/advisories/2019/11/tibco-security-advisory-november-12-2019-tibco-ebx-2019-17330
- http://www.tibco.com/services/support/advisories
- https://www.tibco.com/support/advisories/2019/11/tibco-security-advisory-november-12-2019-tibco-ebx-2019-17330