TIBCO Ebx vulnerabilities

9 CVEs affecting TIBCO Ebx, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-4576, published 2024-06-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-35498, published 2021-10-13. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. The TIBCO EBX Web Server component of TIBCO Software Inc.'s TIBCO EBX, TIBCO EBX, TIBCO EBX, and TIBCO Product and Service Catalog powered by TIBCO EBX contains a vulnerability that under certain…
CVE-2019-17330, published 2019-11-12. Critical severity, CVSS 9.6. EPSS: 1% chance of exploitation in the next 30 days. The Web server component of TIBCO Software Inc.'s TIBCO EBX contains multiple vulnerabilities that theoretically allow authenticated users to perform stored cross-site scripting (XSS) attacks, and…
CVE-2021-23271, published 2021-02-02. High severity, CVSS 8.0. EPSS: 0.9% chance of exploitation in the next 30 days. The TIBCO EBX Web Server component of TIBCO Software Inc.'s TIBCO EBX contains a vulnerability that theoretically allows a low privileged attacker with network access to execute a Stored Cross Site…
CVE-2022-22769, published 2022-01-19. Critical severity, CVSS 9.0. EPSS: 0.9% chance of exploitation in the next 30 days. The Web server component of TIBCO Software Inc.'s TIBCO EBX, TIBCO EBX, TIBCO EBX, TIBCO EBX Add-ons, TIBCO EBX Add-ons, TIBCO EBX Add-ons, and TIBCO Product and Service Catalog powered by TIBCO EBX…
CVE-2022-30577, published 2022-09-21. Critical severity, CVSS 9.0. EPSS: 0.9% chance of exploitation in the next 30 days. The Web Server component of TIBCO Software Inc.'s TIBCO EBX contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute Stored Cross Site…
CVE-2019-17333, published 2020-02-19. Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days. The Web server component of TIBCO Software Inc.'s TIBCO EBX contains a vulnerability that theoretically allows authenticated users to perform stored cross-site scripting (XSS) attacks. Affected…
CVE-2024-4576, published 2024-06-13. Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days. The component listed above contains a vulnerability that allows an attacker to traverse directories and access sensitive files, leading to unauthorized disclosure of system configuration and…
CVE-2023-26222, published 2023-11-14. Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days. The Web Application component of TIBCO Software Inc.'s TIBCO EBX and TIBCO Product and Service Catalog powered by TIBCO EBX contains an easily exploitable vulnerability that allows a low privileged…
CVE-2022-41565, published 2023-02-22. Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days. The Web Application component of TIBCO Software Inc.'s TIBCO EBX and TIBCO Product and Service Catalog powered by TIBCO EBX contains an easily exploitable vulnerability that allows a low privileged…