Approved changes feed: RSS · Atom

cpe:2.3:a:tibco_software_inc.:tibco_ebx_add-ons:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTibco Software Inc. (38407903-e3e7-5562-baac-15027d7f2ebf)
ProductTibco Ebx Add Ons (5e7a128d-e8f6-528d-ac7e-8949978334cf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-26217 vulnerable 2026-06-08 05:57:38.885416 TIBCO EBX Add-ons SQL Injection Vulnerability
HIGH (8.8)
The Data Exchange Add-on component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an easily exploitable vulnerability that allows a low privileged user with import permissions and network access to the EBX server to execute arbitrary SQL statements on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO EBX Add-ons: versions 4.5.17 and below, versions 5.6.2 and below, version 6.1.0.
Published: 2023-07-19T20:36:45.528Z
Updated: 2024-10-24T17:36:09.865Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-26216 vulnerable 2026-06-08 05:57:38.884886 TIBCO EBX Add-ons Arbitrary File Write
CRITICAL (9.1)
The server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an exploitable vulnerability that allows an attacker to upload files to a directory accessible by the web server. Affected releases are TIBCO Software Inc.'s TIBCO EBX Add-ons: versions 4.5.16 and below.
Published: 2023-05-25T18:38:21.403Z
Updated: 2025-01-16T19:13:55.888Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-26215 vulnerable 2026-06-08 05:57:38.883570 TIBCO EBX® Add-ons Path Traversal
HIGH (7.7)
The server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains a vulnerability that allows an attacker with low-privileged application access to read system files that are accessible to the web server. Affected releases are TIBCO Software Inc.'s TIBCO EBX Add-ons: versions 4.5.16 and below.
Published: 2023-05-25T18:41:43.701Z
Updated: 2025-01-16T18:38:07.866Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-41566 vulnerable 2026-06-08 05:48:30.542898 TIBCO EBX Add-ons Cross Site Scripting (XSS) Vulnerability
HIGH (8.7)
The server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute stored XSS on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO EBX Add-ons: versions 5.6.0 and below.
Published: 2023-02-22T00:00:00.000Z
Updated: 2024-08-03T12:49:41.888Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-30578 vulnerable 2026-06-08 05:43:38.599567 TIBCO EBX Add-ons Stored XSS vulnerability
HIGH (8)
The Web Server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute Stored Cross Site Scripting (XSS) on the affected system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO EBX Add-ons: versions 5.4.1 and below.
Published: 2022-09-21T17:55:09.549Z
Updated: 2025-05-28T13:58:17.131Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22769 vulnerable 2026-06-08 05:40:55.255378 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-27148 vulnerable 2026-06-08 05:23:52.143446 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-17332 vulnerable 2026-06-08 05:13:10.243793 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-17331 vulnerable 2026-06-08 05:13:10.241542 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.