Vulnerability · Published Feb 22, 2023 · Assigned by tibco
CVE-2022-41567TIBCO BusinessConnect Stored XSS Vulnerability
High 7.3
In plain English
A high-severity security flaw in TIBCO BusinessConnect from TIBCO Software Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 34% of all known vulnerabilities).
Severity (CVSS 3.1)7.3High
Exploit odds (30 days)0.4%top 65.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
The BusinessConnect UI component of TIBCO Software Inc.'s TIBCO BusinessConnect contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute a cross-site scripting (XSS) attack on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO BusinessConnect: versions 7.3.0 and below.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| TIBCO Software Inc. | TIBCO BusinessConnect | unspecified – through 7.3.0 |