CVE-2022-41567: TIBCO Businessconnect

Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days.

The BusinessConnect UI component of TIBCO Software Inc.'s TIBCO BusinessConnect contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute a cross-site scripting (XSS) attack on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO BusinessConnect: versions 7.3.0 and below.

Affected products

• TIBCO Businessconnect: before 7.3.1 (fixed in 7.3.1)

Published 2023-02-22. Last modified 2026-06-17.