High severity8.0NVD Advisory· Published Feb 2, 2021· Updated Jun 17, 2026

CVE-2021-23271

Description

The TIBCO EBX Web Server component of TIBCO Software Inc.'s TIBCO EBX contains a vulnerability that theoretically allows a low privileged attacker with network access to execute a Stored Cross Site Scripting (XSS) attack on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO EBX: versions 5.9.12 and below.

Affected products

TIBCO Software/EBXllm-fuzzy
Range: <=5.9.12
TIBCO Software/TIBCO EBX Add-onscpe-rescue
Range: unspecified

Patches

Vulnerability mechanics

References

www.tibco.com/support/advisories/2021/02/tibco-security-advisory-february-2-2021-tibco-ebxnvdVendor Advisory
www.tibco.com/services/support/advisoriesnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.520
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000