Approved changes feed: RSS · Atom
cpe:2.3:a:tibco_software_inc.:tibco_ebx:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Tibco Software Inc. (38407903-e3e7-5562-baac-15027d7f2ebf) |
|---|---|
| Product | Tibco Ebx (bcbde1f6-e769-544c-9319-a8ff2cd5ce89) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-26222 |
vulnerable | 2026-06-08 05:57:38.936503 |
TIBCO EBX Cross-site Scripting (XXS) Vulnerability
HIGH (8.7)
The Web Application component of TIBCO Software Inc.'s TIBCO EBX and TIBCO Product and Service Catalog powered by TIBCO EBX contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute a stored XSS on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO EBX: versions 5.9.22 and below, versions 6.0.13 and below and TIBCO Product and Service Catalog powered by TIBCO EBX: versions 5.0.0 and below.
Published: 2023-11-14T19:29:09.766Z
Updated: 2024-08-30T14:06:54.070Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-41565 |
vulnerable | 2026-06-08 05:48:30.539399 |
TIBCO EBX Cross Site Scripting (XSS) Vulnerability
HIGH (8.7)
The Web Application component of TIBCO Software Inc.'s TIBCO EBX and TIBCO Product and Service Catalog powered by TIBCO EBX contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute a stored XSS on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO EBX: versions 5.9.21 and below, versions 6.0.11 and below and TIBCO Product and Service Catalog powered by TIBCO EBX: versions 1.2.0 and below.
Published: 2023-02-22T00:00:00.000Z
Updated: 2024-08-03T12:49:43.191Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-30577 |
vulnerable | 2026-06-08 05:43:38.597457 |
TIBCO EBX Stored XSS vulnerability
HIGH (8)
The Web Server component of TIBCO Software Inc.'s TIBCO EBX contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute Stored Cross Site Scripting (XSS) on the affected system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO EBX: versions 6.0.0 through 6.0.8.
Published: 2022-09-21T17:55:08.767Z
Updated: 2025-05-22T18:31:58.704Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22769 |
vulnerable | 2026-06-08 05:40:55.254375 |
TIBCO EBX vulnerabilities
HIGH (8)
The Web server component of TIBCO Software Inc.'s TIBCO EBX, TIBCO EBX, TIBCO EBX, TIBCO EBX Add-ons, TIBCO EBX Add-ons, TIBCO EBX Add-ons, and TIBCO Product and Service Catalog powered by TIBCO EBX contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute Stored Cross Site Scripting (XSS) on the affected system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO EBX: versions 5.8.124 and below, TIBCO EBX: versions 5.9.3, 5.9.4, 5.9.5, 5.9.6, 5.9.7, 5.9.8, 5.9.9, 5.9.10, 5.9.11, 5.9.12, 5.9.13, 5.9.14, and 5.9.15, TIBCO EBX: versions 6.0.0, 6.0.1, 6.0.2, and 6.0.3, TIBCO EBX Add-ons: versions 3.20.18 and below, TIBCO EBX Add-ons: versions 4.1.0, 4.2.0, 4.2.1, 4.2.2, 4.3.0, 4.3.1, 4.3.2, 4.3.3, 4.3.4, 4.4.0, 4.4.1, 4.4.2, 4.4.3, 4.5.0, 4.5.1, 4.5.2, 4.5.3, 4.5.4, 4.5.5, and 4.5.6, TIBCO EBX Add-ons: versions 5.0.0, 5.0.1, 5.1.0, 5.1.1, and 5.2.0, and TIBCO Product and Service Catalog powered by TIBCO EBX: versions 1.1.0 and below.
Published: 2022-01-19T19:25:10.795Z
Updated: 2024-09-17T00:16:09.810Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-35498 |
vulnerable | 2026-06-08 05:32:48.861740 |
TIBCO EBX Insecure Login Mechanism
CRITICAL (9.8)
The TIBCO EBX Web Server component of TIBCO Software Inc.'s TIBCO EBX, TIBCO EBX, TIBCO EBX, and TIBCO Product and Service Catalog powered by TIBCO EBX contains a vulnerability that under certain specific conditions allows an attacker to enter a password other than the legitimate password and it will be accepted as valid. Affected releases are TIBCO Software Inc.'s TIBCO EBX: versions 5.8.123 and below, TIBCO EBX: versions 5.9.3, 5.9.4, 5.9.5, 5.9.6, 5.9.7, 5.9.8, 5.9.9, 5.9.10, 5.9.11, 5.9.12, 5.9.13, and 5.9.14, TIBCO EBX: versions 6.0.0 and 6.0.1, and TIBCO Product and Service Catalog powered by TIBCO EBX: version 1.0.0.
Published: 2021-10-13T16:55:10.753Z
Updated: 2024-09-16T17:32:55.642Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23271 |
vulnerable | 2026-06-08 05:30:02.597262 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-17333 |
vulnerable | 2026-06-08 05:13:10.246856 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-17330 |
vulnerable | 2026-06-08 05:13:10.236176 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.