Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2023-26217

TIBCO EBX Add-ons SQL Injection Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
tibco

Description

The Data Exchange Add-on component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an easily exploitable vulnerability that allows a low privileged user with import permissions and network access to the EBX server to execute arbitrary SQL statements on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO EBX Add-ons: versions 4.5.17 and below, versions 5.6.2 and below, version 6.1.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TIBCO Software Inc. TIBCO EBX Add-ons

Default version status: unaffected

  • 0 to ≤ 4.5.17affected
  • 0 to ≤ 5.6.2affected
  • 6.1.0affected

References