Approved changes feed: RSS · Atom

cpe:2.3:a:tibco:nimbus:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTibco (92ae8683-1e4a-52cf-ae60-583c5fda0048)
ProductNimbus (729fc500-0da9-58c2-8eee-30b97dcfde10)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-26218 vulnerable 2026-06-08 05:57:38.889817 TIBCO Nimbus Reflected Cross-site Scripting (XSS) vulnerabilities
HIGH (8)
The Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains easily exploitable Reflected Cross Site Scripting (XSS) vulnerabilities that allow a low privileged attacker to social engineer a legitimate user with network access to execute scripts targeting the affected system or the victim's local system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO Nimbus: versions 10.6.0 and below.
Published: 2023-09-29T17:07:11.618Z
Updated: 2024-09-23T16:26:35.804Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-35499 vulnerable 2026-06-08 05:32:48.865857 TIBCO Nimbus Stored Cross-site Scripting (XSS) vulnerabilities
HIGH (8)
The Web Reporting component of TIBCO Software Inc.'s TIBCO Nimbus contains easily exploitable Stored Cross Site Scripting (XSS) vulnerabilities that allow a low privileged attacker to social engineer a legitimate user with network access to execute scripts targeting the affected system or the victim's local system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO Nimbus: versions 10.4.0 and below.
Published: 2021-10-26T16:35:09.440Z
Updated: 2024-09-17T01:27:09.136Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.