VYPR
← All advisories
High severity7.3NVD Advisory· Published Aug 16, 2022· Updated Jun 17, 2026

CVE-2022-30575

CVE-2022-30575

Description

The Web Console component of TIBCO Software Inc.'s TIBCO Data Science - Workbench, TIBCO Statistica, TIBCO Statistica - Estore Edition, and TIBCO Statistica Trial contains easily exploitable Reflected Cross Site Scripting (XSS) vulnerabilities that allow a low privileged attacker with network access to execute scripts targeting the affected system or the victim's local system. Affected releases are TIBCO Software Inc.'s TIBCO Data Science - Workbench: versions 14.0.0 and below, TIBCO Statistica: versions 14.0.0 and below, TIBCO Statistica - Estore Edition: versions 14.0.0 and below, and TIBCO Statistica Trial: versions 14.0.0 and below.

Affected products

11
  • TIBCO Software/Data Science Workbench3 versions
    cpe:2.3:a:tibco:data_science_-_workbench:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:tibco:data_science_-_workbench:*:*:*:*:*:*:*:*range: <14.0.1
    • (no CPE)range: <=14.0.0
    • (no CPE)range: unspecified
  • TIBCO Software/Statistica6 versions
    cpe:2.3:a:tibco:statistica:*:*:*:*:-:*:*:*+ 5 more
    • cpe:2.3:a:tibco:statistica:*:*:*:*:-:*:*:*range: <14.0.1
    • cpe:2.3:a:tibco:statistica:*:*:*:*:estore:*:*:*range: <14.0.1
    • cpe:2.3:a:tibco:statistica:*:*:*:*:trial:*:*:*range: <14.0.1
    • (no CPE)range: <=14.0.0
    • (no CPE)range: unspecified
    • (no CPE)range: unspecified
  • TIBCO Software/TIBCO Statistica - Estore Editionllm-fuzzy2 versions
    <=14.0.0+ 1 more
    • (no CPE)range: <=14.0.0
    • (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.