High severity8.0NVD Advisory· Published May 18, 2022· Updated Jun 17, 2026
CVE-2022-22776
CVE-2022-22776
Description
The Web Server component of TIBCO Software Inc.'s TIBCO BusinessConnect Trading Community Management contains easily exploitable vulnerabilities that allows a low privileged attacker with network access to execute Stored Cross Site Scripting (XSS) on the affected system. A successful attack using these vulnerabilities requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO BusinessConnect Trading Community Management: versions 6.1.0 and below.
Affected products
3cpe:2.3:a:tibco:businessconnect_trading_community_management:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:tibco:businessconnect_trading_community_management:*:*:*:*:*:*:*:*range: <6.1.1
- (no CPE)range: <=6.1.0
- (no CPE)range: unspecified
Patches
Vulnerability mechanics
References
2- www.tibco.com/services/support/advisoriesnvdVendor Advisory
- www.tibco.com/support/advisories/2022/05/tibco-security-advisory-may-18-2022-tibco-bctcm-cve-2022-22776nvdVendor Advisory
News mentions
0No linked articles in our index yet.