PT-2019-15091 · Tibco Software · Tibco Ebx

Published 2019-11-12 · Updated 2024-02-13 · CVE-2019-17330

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TIBCO EBX versions up to and including 5.8.1.fixR TIBCO EBX versions 5.9.3, 5.9.4, 5.9.5, 5.9.6

Description The Web server component of TIBCO Software Inc.'s TIBCO EBX contains multiple vulnerabilities that allow authenticated users to perform stored cross-site scripting (XSS) attacks, and unauthenticated users to perform reflected cross-site scripting attacks.

Recommendations For TIBCO EBX versions up to and including 5.8.1.fixR, update to a version later than 5.8.1.fixR to resolve the issue. For TIBCO EBX versions 5.9.3, 5.9.4, 5.9.5, 5.9.6, update to a version later than these to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2019-17330

Affected Products

Tibco Ebx

References · 5

• https://tibco.com/support/advisories/2019/11/tibco-security-advisory-november-12-2019-tibco-ebx-2019-17330 · Vendor Advisory
• http://tibco.com/services/support/advisories · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-17330 · Security Note
• https://osv.dev/vulnerability/CVE-2019-17330 · Vendor Advisory
• https://twitter.com/Esparta6108713/status/1757321185652768857 · Twitter Post