High severity8.0NVD Advisory· Published Sep 21, 2022· Updated Jun 17, 2026
CVE-2022-30578
CVE-2022-30578
Description
The Web Server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute Stored Cross Site Scripting (XSS) on the affected system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO EBX Add-ons: versions 5.4.1 and below.
Affected products
3cpe:2.3:a:tibco:ebx_add-ons:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:tibco:ebx_add-ons:*:*:*:*:*:*:*:*range: <5.4.2
- (no CPE)range: <=5.4.1
- (no CPE)range: unspecified
Patches
Vulnerability mechanics
References
3- www.tibco.com/services/support/advisoriesnvdVendor Advisory
- www.tibco.com/support/advisories/2022/09/tibco-security-advisory-sep-21-2022-ebx-add-ons-cve-2022-30578nvdVendor Advisory
- www.tibco.com/support/advisories/2022/09/tibco-security-advisory-september-21-2022-tibco-ebx-add-ons-cve-2022nvdVendor Advisory
News mentions
0No linked articles in our index yet.