CVE-2022-22777medium

CVE-2022-22777: medium-severity vulnerability in TIBCO BusinessConnect Trading Community…

TIBCO BusinessConnect Trading Community Management Reflected Cross Site Scripting Vulnerability

Published 18 May 2022 · Updated 16 Sep 2024

Follow this CVE + Monitor TIBCO BusinessConnect Trading Community Management

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.1epss 0.6%

The Web Server component of TIBCO Software Inc.'s TIBCO BusinessConnect Trading Community Management contains easily exploitable Reflected Cross Site Scripting (XSS) vulnerabilities that allow an unauthenticated attacker with network access to execute scripts targeting the affected system or the victim's local system. Affected releases are TIBCO Software Inc.'s TIBCO BusinessConnect Trading Community Management: versions 6.1.0 and below.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected products

TIBCO Software Inc. · TIBCO BusinessConnect Trading Community Management

Related CVEs — TIBCO BusinessConnect Trading Community…

In the same product, most dangerous first.

CVE-2022-22776HIGHTIBCO BusinessConnect Trading Community Management Stored Cross Site Scripting VulnerabilityEPSS 0.6%CVE-2022-22778HIGHTIBCO BusinessConnect Trading Community Management Cross-Site Request Forgery VulnerabilityEPSS 0.4%

References

https://www.tibco.com/services/support/advisories https://www.tibco.com/support/advisories/2022/05/tibco-security-advisory-may-18-2022-tibco-bctcm-cve-2022-22777