Lucene search

TibcoCVE-2022-30571

HistoryAug 02, 2022 - 5:15 p.m.

CVE-2022-30571

2022-08-0217:15:10

CWE-79

tibco

web.nvd.nist.gov

cve-2022-30571

tibco

software

iway service manager

xss

vulnerability

nvd

network access

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

EPSS

0.001

Percentile

22.7%

JSON

The iWay Service Manager Console component of TIBCO Software Inc.'s TIBCO iWay Service Manager contains easily exploitable Reflected Cross Site Scripting (XSS) vulnerabilities that allow a low privileged attacker with network access to execute scripts targeting the affected system or the victim’s local system. Affected releases are TIBCO Software Inc.'s TIBCO iWay Service Manager: versions 8.0.6 and below.

Affected configurations

Nvd

Node

tibcoiway_service_managerRange<8.0.7

VendorProductVersionCPE
tibcoiway_service_manager*cpe:2.3:a:tibco:iway_service_manager:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
tibco	iway_service_manager	*	cpe:2.3:a:tibco:iway_service_manager::::::::

CNA Affected

[
  {
    "product": "TIBCO iWay Service Manager",
    "vendor": "TIBCO Software Inc.",
    "versions": [
      {
        "lessThanOrEqual": "8.0.6",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

www.tibco.com/services/support/advisories

www.tibco.com/support/advisories/2022/07/tibco-security-advisory-august-2-2022-tibco-iway-sm-cve-2022-30571

Social References

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

EPSS

0.001

Percentile

22.7%

JSON

Related for CVE-2022-30571