Approved changes feed: RSS · Atom

cpe:2.3:a:tibco:ebx:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTibco (92ae8683-1e4a-52cf-ae60-583c5fda0048)
ProductEbx (5fd4928c-b358-58f4-be91-d282c34e3a74)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-4576 vulnerable 2026-06-08 06:50:18.189125 TIBCO EBX File Inclusion Vulnerability
The component listed above contains a vulnerability that allows an attacker to traverse directories and access sensitive files, leading to unauthorized disclosure of system configuration and potentially sensitive information.
Published: 2024-06-13T06:31:41.034Z
Updated: 2024-10-27T21:52:02.177Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-26222 vulnerable 2026-06-08 05:57:38.938356 TIBCO EBX Cross-site Scripting (XXS) Vulnerability
HIGH (8.7)
The Web Application component of TIBCO Software Inc.'s TIBCO EBX and TIBCO Product and Service Catalog powered by TIBCO EBX contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute a stored XSS on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO EBX: versions 5.9.22 and below, versions 6.0.13 and below and TIBCO Product and Service Catalog powered by TIBCO EBX: versions 5.0.0 and below.
Published: 2023-11-14T19:29:09.766Z
Updated: 2024-08-30T14:06:54.070Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-41565 vulnerable 2026-06-08 05:48:30.540708 TIBCO EBX Cross Site Scripting (XSS) Vulnerability
HIGH (8.7)
The Web Application component of TIBCO Software Inc.'s TIBCO EBX and TIBCO Product and Service Catalog powered by TIBCO EBX contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute a stored XSS on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO EBX: versions 5.9.21 and below, versions 6.0.11 and below and TIBCO Product and Service Catalog powered by TIBCO EBX: versions 1.2.0 and below.
Published: 2023-02-22T00:00:00.000Z
Updated: 2024-08-03T12:49:43.191Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-30577 vulnerable 2026-06-08 05:43:38.598076 TIBCO EBX Stored XSS vulnerability
HIGH (8)
The Web Server component of TIBCO Software Inc.'s TIBCO EBX contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute Stored Cross Site Scripting (XSS) on the affected system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO EBX: versions 6.0.0 through 6.0.8.
Published: 2022-09-21T17:55:08.767Z
Updated: 2025-05-22T18:31:58.704Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22769 vulnerable 2026-06-08 05:40:55.256631 TIBCO EBX vulnerabilities
HIGH (8)
The Web server component of TIBCO Software Inc.'s TIBCO EBX, TIBCO EBX, TIBCO EBX, TIBCO EBX Add-ons, TIBCO EBX Add-ons, TIBCO EBX Add-ons, and TIBCO Product and Service Catalog powered by TIBCO EBX contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute Stored Cross Site Scripting (XSS) on the affected system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO EBX: versions 5.8.124 and below, TIBCO EBX: versions 5.9.3, 5.9.4, 5.9.5, 5.9.6, 5.9.7, 5.9.8, 5.9.9, 5.9.10, 5.9.11, 5.9.12, 5.9.13, 5.9.14, and 5.9.15, TIBCO EBX: versions 6.0.0, 6.0.1, 6.0.2, and 6.0.3, TIBCO EBX Add-ons: versions 3.20.18 and below, TIBCO EBX Add-ons: versions 4.1.0, 4.2.0, 4.2.1, 4.2.2, 4.3.0, 4.3.1, 4.3.2, 4.3.3, 4.3.4, 4.4.0, 4.4.1, 4.4.2, 4.4.3, 4.5.0, 4.5.1, 4.5.2, 4.5.3, 4.5.4, 4.5.5, and 4.5.6, TIBCO EBX Add-ons: versions 5.0.0, 5.0.1, 5.1.0, 5.1.1, and 5.2.0, and TIBCO Product and Service Catalog powered by TIBCO EBX: versions 1.1.0 and below.
Published: 2022-01-19T19:25:10.795Z
Updated: 2024-09-17T00:16:09.810Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-35498 vulnerable 2026-06-08 05:32:48.863077 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-23271 vulnerable 2026-06-08 05:30:02.597836 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-17333 vulnerable 2026-06-08 05:13:10.246894 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-17330 vulnerable 2026-06-08 05:13:10.236726 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.