TIBCO Businessconnect vulnerabilities

4 CVEs affecting TIBCO Businessconnect, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-26214, published 2023-02-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-43049, published 2022-02-15. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. The Database component of TIBCO Software Inc.'s TIBCO BusinessConnect Container Edition contains an easily exploitable vulnerability that allows an unauthenticated attacker with network access to…
CVE-2022-41567, published 2023-02-22. Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days. The BusinessConnect UI component of TIBCO Software Inc.'s TIBCO BusinessConnect contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute a…
CVE-2023-26214, published 2023-02-22. Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days. The BusinessConnect UI component of TIBCO Software Inc.'s TIBCO BusinessConnect contains easily exploitable Reflected Cross Site Scripting (XSS) vulnerabilities that allow a low privileged attacker…
CVE-2021-43050, published 2022-02-15. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. The Auth Server component of TIBCO Software Inc.'s TIBCO BusinessConnect Container Edition contains an easily exploitable vulnerability that allows an unauthenticated attacker with local access to…