VYPR
← All advisories
High severity8.1NVD Advisory· Published Aug 2, 2022· Updated Jun 17, 2026

CVE-2022-30571

CVE-2022-30571

Description

The iWay Service Manager Console component of TIBCO Software Inc.'s TIBCO iWay Service Manager contains easily exploitable Reflected Cross Site Scripting (XSS) vulnerabilities that allow a low privileged attacker with network access to execute scripts targeting the affected system or the victim's local system. Affected releases are TIBCO Software Inc.'s TIBCO iWay Service Manager: versions 8.0.6 and below.

Affected products

3
  • TIBCO Software/Iway Service Manager3 versions
    cpe:2.3:a:tibco:iway_service_manager:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:tibco:iway_service_manager:*:*:*:*:*:*:*:*range: <8.0.7
    • (no CPE)range: <=8.0.6
    • (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.