PT-2022-20183 · Tibco Software · Tibco Statistica - Estore Edition+3

Published 2022-08-16 · Updated 2022-08-17 · CVE-2022-30575

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions TIBCO Data Science - Workbench versions 14.0.0 and below TIBCO Statistica versions 14.0.0 and below TIBCO Statistica - Estore Edition versions 14.0.0 and below TIBCO Statistica Trial versions 14.0.0 and below

Description The Web Console component of TIBCO Software Inc.'s products contains easily exploitable Reflected Cross Site Scripting (XSS) vulnerabilities. These vulnerabilities allow a low privileged attacker with network access to execute scripts targeting the affected system or the victim's local system.

Recommendations For TIBCO Data Science - Workbench versions 14.0.0 and below, update to a version above 14.0.0 to mitigate the risk. For TIBCO Statistica versions 14.0.0 and below, update to a version above 14.0.0 to mitigate the risk. For TIBCO Statistica - Estore Edition versions 14.0.0 and below, update to a version above 14.0.0 to mitigate the risk. For TIBCO Statistica Trial versions 14.0.0 and below, update to a version above 14.0.0 to mitigate the risk.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-30575

Affected Products

Tibco Data Science - Workbench

Tibco Statistica

Tibco Statistica - Estore Edition

Tibco Statistica Trial

References · 5

• https://osv.dev/vulnerability/CVE-2022-30575 · Vendor Advisory
• https://tibco.com/support/advisories/2022/08/tibco-security-advisory-august-16-2022-tibco-statistica-cve-2022-30575 · Vendor Advisory
• https://tibco.com/services/support/advisories · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-30575 · Security Note
• https://t.me/cibsecurity/48243 · Telegram Post