Skip to content
CVE PROGRAM SOURCE RECORD4.6 Medium

CVE-2021-23272

TIBCO BPM Cross Site Scripting (XSS)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
tibco

Description

The Application Development Clients component of TIBCO Software Inc.'s TIBCO BPM Enterprise and TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric contains a vulnerability that theoretically allows a low privileged attacker with network access to execute a Cross Site Scripting (XSS) attack on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO BPM Enterprise: versions 4.3.0 and below and TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric: versions 4.3.0 and below.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TIBCO Software Inc. TIBCO BPM Enterprise

  • unspecified to ≤ 4.3.0affected

TIBCO Software Inc. TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric

  • unspecified to ≤ 4.3.0affected

References