TIBCO Ebx Add-Ons vulnerabilities

9 CVEs affecting TIBCO Ebx Add-Ons, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-26217, published 2023-07-19.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-27148, published 2021-01-12. High severity, CVSS 7.1. EPSS: 1.1% chance of exploitation in the next 30 days. The TIBCO EBX Add-on for Oracle Hyperion EPM, TIBCO EBX Data Exchange Add-on, and TIBCO EBX Insight Add-on components of TIBCO Software Inc.'s TIBCO EBX Add-ons contain a vulnerability that…
CVE-2022-30578, published 2022-09-21. Critical severity, CVSS 9.0. EPSS: 1.1% chance of exploitation in the next 30 days. The Web Server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute Stored Cross Site…
CVE-2022-22769, published 2022-01-19. Critical severity, CVSS 9.0. EPSS: 0.9% chance of exploitation in the next 30 days. The Web server component of TIBCO Software Inc.'s TIBCO EBX, TIBCO EBX, TIBCO EBX, TIBCO EBX Add-ons, TIBCO EBX Add-ons, TIBCO EBX Add-ons, and TIBCO Product and Service Catalog powered by TIBCO EBX…
CVE-2023-26216, published 2023-05-25. High severity, CVSS 7.2. EPSS: 0.8% chance of exploitation in the next 30 days. The server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an exploitable vulnerability that allows an attacker to upload files to a directory accessible by the web server. Affected…
CVE-2023-26217, published 2023-07-19. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. The Data Exchange Add-on component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an easily exploitable vulnerability that allows a low privileged user with import permissions and network access…
CVE-2019-17332, published 2019-11-12. Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days. The Digital Asset Manager Web Interface component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains a vulnerability that theoretically allows authenticated users to perform stored cross-site…
CVE-2023-26215, published 2023-05-25. Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days. The server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains a vulnerability that allows an attacker with low-privileged application access to read system files that are accessible to…
CVE-2019-17331, published 2019-11-12. Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days. The Data Exchange Web Interface component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains a vulnerability that theoretically allows authenticated users to perform stored cross-site scripting…
CVE-2022-41566, published 2023-02-22. Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days. The server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute stored XSS on the…