Threat database

2 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.0	EPSS 1.1%	CVE-2022-30578TIBCO EBX Add-ons · Successful execution of these vulnerabilities will result in an attacker being able to execute commands with the privileges of the affected user. High8.0EPSS 1.1%2022-09-21CVE Database V5CVE-2022-30578 The Web Server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute Stored Cross Site Scripting (XSS) on the affected system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO EBX Add-ons: versions 5.4.1 and below. EPSS 1.1%Vulnerability TIBCO Software Inc.Germany France+7	CVE Database V5	2022-09-21
High	7.1	EPSS 0.6%	CVE-2022-30579TIBCO Spotfire Analytics Platform for AWS Marketplace · Successful exploitation of this vulnerability can result in unauthorized update, insert or delete access to Spotfire Server data and the ability to cause a partial denial of service. This vulnerability could allow an attacker to access resources other than the vulnerable system. High7.1EPSS 0.6%2022-09-20CVE Database V5CVE-2022-30579 The Web Player component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains a difficult to exploit vulnerability that allows a low privileged attacker with network access to execute blind Server Side Request Forgery (SSRF) on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace: version 12.0.0 and TIBCO Spotfire Server: version 12.0.0. EPSS 0.6%Vulnerability TIBCO Software Inc.Germany France+6	CVE Database V5	2022-09-20

Showing 1–2 of 2 results