CVE-2021-23271: falha de alta gravidade em TIBCO EBX
TIBCO EBX Cross Site Scripting (XSS)
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8epss 0.9%
The TIBCO EBX Web Server component of TIBCO Software Inc.'s TIBCO EBX contains a vulnerability that theoretically allows a low privileged attacker with network access to execute a Stored Cross Site Scripting (XSS) attack on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO EBX: versions 5.9.12 and below.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Produtos afetados
TIBCO Software Inc. · TIBCO EBXCVEs relacionadas — TIBCO EBX
No mesmo produto, das mais perigosas para as menos.
CVE-2021-35498CRITICALTIBCO EBX Insecure Login MechanismEPSS 1.3%CVE-2019-17330HIGHTIBCO EBX Exposes Multiple Cross-Site Scripting VulnerabilitiesEPSS 1.0%CVE-2022-22769HIGHTIBCO EBX vulnerabilitiesEPSS 0.9%CVE-2022-30577HIGHTIBCO EBX Stored XSS vulnerabilityEPSS 0.9%CVE-2019-17333HIGHTIBCO EBX Exposes Cross-Site Scripting VulnerabilityEPSS 0.7%CVE-2023-26222HIGHTIBCO EBX Cross-site Scripting (XXS) VulnerabilityEPSS 0.5%