PT-2023-20542 · Tibco Software · Tibco Businessconnect

Published 2023-02-22 · Updated 2025-03-12 · CVE-2023-26214

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions TIBCO BusinessConnect versions 7.3.0 and below

Description The BusinessConnect UI component of TIBCO Software Inc.'s TIBCO BusinessConnect contains easily exploitable Reflected Cross Site Scripting (XSS) vulnerabilities. This allows a low privileged attacker with network access to execute scripts targeting the affected system or the victim's local system.

Recommendations For versions 7.3.0 and below, update to a version above 7.3.0 to resolve the issue. As a temporary workaround, consider restricting access to the BusinessConnect UI component to minimize the risk of exploitation.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2023-26214

Affected Products

Tibco Businessconnect

References · 5

• https://osv.dev/vulnerability/CVE-2023-26214 · Vendor Advisory
• https://tibco.com/services/support/advisories · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-26214 · Security Note
• https://t.me/cibsecurity/58699 · Telegram Post
• https://t.me/cvenotify/114470 · Telegram Post