CVE-2021-23272: medium-severity vulnerability in TIBCO BPM Enterprise
TIBCO BPM Cross Site Scripting (XSS)
Published · Updated
Follow this CVE+ Monitor TIBCO BPM Enterprise+ Monitor TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 4.6epss 0.5%
The Application Development Clients component of TIBCO Software Inc.'s TIBCO BPM Enterprise and TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric contains a vulnerability that theoretically allows a low privileged attacker with network access to execute a Cross Site Scripting (XSS) attack on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO BPM Enterprise: versions 4.3.0 and below and TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric: versions 4.3.0 and below.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
Affected products
TIBCO Software Inc. · TIBCO BPM EnterpriseTIBCO Software Inc. · TIBCO BPM Enterprise Distribution for TIBCO Silver FabricRelated CVEs — TIBCO BPM Enterprise
In the same product, most dangerous first.