Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2019-17330

TIBCO EBX Exposes Multiple Cross-Site Scripting Vulnerabilities

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
tibco

Description

The Web server component of TIBCO Software Inc.'s TIBCO EBX contains multiple vulnerabilities that theoretically allow authenticated users to perform stored cross-site scripting (XSS) attacks, and unauthenticated users to perform reflected cross-site scripting attacks. Affected releases are TIBCO Software Inc.'s TIBCO EBX: versions up to and including 5.8.1.fixR, versions 5.9.3, 5.9.4, 5.9.5, and 5.9.6.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TIBCO Software Inc. TIBCO EBX

  • unspecified to ≤ 5.8.1.fixRaffected
  • 5.9.3affected
  • 5.9.4affected
  • 5.9.5affected
  • 5.9.6affected

References