← CVE Intelligence

CVE-2021-23272

TIBCO BPM Cross Site Scripting (XSS) PUBLISHED

Description (CNA)

The Application Development Clients component of TIBCO Software Inc.'s TIBCO BPM Enterprise and TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric contains a vulnerability that theoretically allows a low privileged attacker with network access to execute a Cross Site Scripting (XSS) attack on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO BPM Enterprise: versions 4.3.0 and below and TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric: versions 4.3.0 and below.

Affected (CNA)

Vendor / productVersions
TIBCO Software Inc. / TIBCO BPM Enterpriseaffected unspecified through 4.3.0
TIBCO Software Inc. / TIBCO BPM Enterprise Distribution for TIBCO Silver Fabricaffected unspecified through 4.3.0

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.