VYPR
← All advisories
High severity8.7NVD Advisory· Published Aug 16, 2022· Updated Jun 17, 2026

CVE-2022-30576

CVE-2022-30576

Description

The Web Console component of TIBCO Software Inc.'s TIBCO Data Science - Workbench, TIBCO Statistica, TIBCO Statistica - Estore Edition, and TIBCO Statistica Trial contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute Stored Cross Site Scripting (XSS) on the affected system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO Data Science - Workbench: versions 14.0.0 and below, TIBCO Statistica: versions 14.0.0 and below, TIBCO Statistica - Estore Edition: versions 14.0.0 and below, and TIBCO Statistica Trial: versions 14.0.0 and below.

Affected products

11
  • TIBCO Software/Data Science Workbench3 versions
    cpe:2.3:a:tibco:data_science_-_workbench:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:tibco:data_science_-_workbench:*:*:*:*:*:*:*:*range: <14.0.1
    • (no CPE)range: <=14.0.0
    • (no CPE)range: unspecified
  • TIBCO Software/Statistica6 versions
    cpe:2.3:a:tibco:statistica:*:*:*:*:-:*:*:*+ 5 more
    • cpe:2.3:a:tibco:statistica:*:*:*:*:-:*:*:*range: <14.0.1
    • cpe:2.3:a:tibco:statistica:*:*:*:*:estore:*:*:*range: <14.0.1
    • cpe:2.3:a:tibco:statistica:*:*:*:*:trial:*:*:*range: <14.0.1
    • (no CPE)range: <=14.0.0
    • (no CPE)range: unspecified
    • (no CPE)range: unspecified
  • TIBCO Software/TIBCO Statistica - Estore Editionllm-fuzzy2 versions
    <=14.0.0+ 1 more
    • (no CPE)range: <=14.0.0
    • (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.