Approved changes feed: RSS · Atom

cpe:2.3:a:tibco:bpm_enterprise_distribution_for_silver_fabric:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTibco (92ae8683-1e4a-52cf-ae60-583c5fda0048)
ProductBpm Enterprise Distribution For Silver Fabric (a65657be-aa74-5d1c-b8cb-ee087fc59cac)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-22775 vulnerable 2026-06-08 05:40:55.319107 TIBCO ActiveMatrix BPM Reflected Cross Site Scripting (XSS) vulnerability
HIGH (8.1)
The Workspace client component of TIBCO Software Inc.'s TIBCO BPM Enterprise and TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric contains difficult to exploit Reflected Cross Site Scripting (XSS) vulnerabilities that allow low privileged attackers with network access to execute scripts targeting the affected system or the victim's local system. Affected releases are TIBCO Software Inc.'s TIBCO BPM Enterprise: versions 4.3.1 and below and TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric: versions 4.3.1 and below.
Published: 2022-05-17T17:30:14.875Z
Updated: 2024-09-17T03:37:44.649Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-23272 vulnerable 2026-06-08 05:30:02.600943 TIBCO BPM Cross Site Scripting (XSS)
MEDIUM (4.6)
The Application Development Clients component of TIBCO Software Inc.'s TIBCO BPM Enterprise and TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric contains a vulnerability that theoretically allows a low privileged attacker with network access to execute a Cross Site Scripting (XSS) attack on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO BPM Enterprise: versions 4.3.0 and below and TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric: versions 4.3.0 and below.
Published: 2021-01-26T18:15:13.846Z
Updated: 2024-09-16T17:38:34.192Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.