Unrated severityNVD Advisory· Published Aug 2, 2022· Updated Sep 16, 2024
TIBCO iWay Service Manager Reflected Cross Site Scripting (XSS) Vulnerability
CVE-2022-30571
Description
The iWay Service Manager Console component of TIBCO Software Inc.'s TIBCO iWay Service Manager contains easily exploitable Reflected Cross Site Scripting (XSS) vulnerabilities that allow a low privileged attacker with network access to execute scripts targeting the affected system or the victim's local system. Affected releases are TIBCO Software Inc.'s TIBCO iWay Service Manager: versions 8.0.6 and below.
Affected products
2<=8.0.6+ 1 more
- (no CPE)range: <=8.0.6
- (no CPE)range: unspecified
Patches
Vulnerability mechanics
References
2- www.tibco.com/services/support/advisoriesmitrex_refsource_CONFIRM
- www.tibco.com/support/advisories/2022/07/tibco-security-advisory-august-2-2022-tibco-iway-sm-cve-2022-30571mitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.