Cross site scripting

2021-01-2619:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

22.7%

JSON

The Application Development Clients component of TIBCO Software Inc.'s TIBCO BPM Enterprise and TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric contains a vulnerability that theoretically allows a low privileged attacker with network access to execute a Cross Site Scripting (XSS) attack on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO BPM Enterprise: versions 4.3.0 and below and TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric: versions 4.3.0 and below.

CPENameOperatorVersion
bpm_enterprisele4.3.0
bpm_enterprise_distribution_for_silver_fabricle4.3.0

CPE	Name	Operator	Version
	bpm_enterprise	le	4.3.0
	bpm_enterprise_distribution_for_silver_fabric	le	4.3.0

References

www.tibco.com/services/support/advisories

0.001 Low

EPSS

Percentile

22.7%

JSON

Related for PRION:CVE-2021-23272