Tibco Nimbus
Approved changes feed: RSS · Atom
cpe:2.3:a:tibco_software_inc.:tibco_nimbus:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Tibco Software Inc. (38407903-e3e7-5562-baac-15027d7f2ebf) |
|---|---|
| Product | Tibco Nimbus (bc4a6e85-07e7-57cc-8f14-c45147e118d6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-26218 |
vulnerable | 2026-06-08 05:57:38.888681 |
TIBCO Nimbus Reflected Cross-site Scripting (XSS) vulnerabilities
HIGH (8)
The Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains easily exploitable Reflected Cross Site Scripting (XSS) vulnerabilities that allow a low privileged attacker to social engineer a legitimate user with network access to execute scripts targeting the affected system or the victim's local system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO Nimbus: versions 10.6.0 and below.
Published: 2023-09-29T17:07:11.618Z
Updated: 2024-09-23T16:26:35.804Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-41560 |
vulnerable | 2026-06-08 05:48:30.518892 |
TIBCO Nimbus Denial of Service Vulnerability
MEDIUM (6.5)
The Statement Set Upload via the Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute a Denial of Service Attack on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO Nimbus: version 10.5.0.
Published: 2022-12-12T01:49:10.008Z
Updated: 2025-04-22T19:29:48.505Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-41559 |
vulnerable | 2026-06-08 05:48:30.517721 |
TIBCO Nimbus Open Redirect Vulnerability
CRITICAL (9.3)
The Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains an easily exploitable vulnerability that allows an unauthenticated attacker with network access to exploit an open redirect on the affected system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO Nimbus: version 10.5.0.
Published: 2022-12-12T01:49:10.008Z
Updated: 2025-04-22T20:14:04.667Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-35499 |
vulnerable | 2026-06-08 05:32:48.865037 |
TIBCO Nimbus Stored Cross-site Scripting (XSS) vulnerabilities
HIGH (8)
The Web Reporting component of TIBCO Software Inc.'s TIBCO Nimbus contains easily exploitable Stored Cross Site Scripting (XSS) vulnerabilities that allow a low privileged attacker to social engineer a legitimate user with network access to execute scripts targeting the affected system or the victim's local system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO Nimbus: versions 10.4.0 and below.
Published: 2021-10-26T16:35:09.440Z
Updated: 2024-09-17T01:27:09.136Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.