CVE-2022-22776: TIBCO Businessconnect Trading Community Management

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

The Web Server component of TIBCO Software Inc.'s TIBCO BusinessConnect Trading Community Management contains easily exploitable vulnerabilities that allows a low privileged attacker with network access to execute Stored Cross Site Scripting (XSS) on the affected system. A successful attack using these vulnerabilities requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO BusinessConnect Trading Community Management: versions 6.1.0 and below.

Affected products

• TIBCO Businessconnect Trading Community Management: before 6.1.1 (fixed in 6.1.1)

Published 2022-05-18. Last modified 2026-06-17.