TIBCO EBX Add-ons vulnerabilities

4 known vulnerabilities in TIBCO EBX Add-ons from TIBCO Software. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  TIBCO EBX Add-ons: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-26217Jul 19, 2023TIBCO Software

  The Data Exchange Add-on component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an easily exploitable vulnerability that allows a low privileged user with import permissions and network access to the EBX server to execute arbitrary SQL statements on the

• 7.2 High severity

  TIBCO EBX Add-ons: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-26216May 25, 2023TIBCO Software

  The server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an exploitable vulnerability that allows an attacker to upload files to a directory accessible by the web server. Affected releases are TIBCO Software Inc.'s TIBCO EBX Add-ons: versions 4

• 9.0 Critical severity

  TIBCO EBX Add-ons: Improper Neutralization of Input During Web Page Generation

  CVE-2022-30578Sep 21, 2022TIBCO SoftwareEPSS 1.06%

  The Web Server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute Stored Cross Site Scripting (XSS) on the affected system. A successful attack

• 9.0 Critical severity

  TIBCO EBX: Improper Neutralization of Input During Web Page Generation

  CVE-2022-22769Jan 19, 2022TIBCO Software

  The Web server component of TIBCO Software Inc.'s TIBCO EBX, TIBCO EBX, TIBCO EBX, TIBCO EBX Add-ons, TIBCO EBX Add-ons, TIBCO EBX Add-ons, and TIBCO Product and Service Catalog powered by TIBCO EBX contains an easily exploitable vulnerability that allows a lo