CVE-2023-26214 — TIBCO BusinessConnect Reflected XSS Vulnerability

Description (CNA)

The BusinessConnect UI component of TIBCO Software Inc.'s TIBCO BusinessConnect contains easily exploitable Reflected Cross Site Scripting (XSS) vulnerabilities that allow a low privileged attacker with network access to execute scripts targeting the affected system or the victim's local system. Affected releases are TIBCO Software Inc.'s TIBCO BusinessConnect: versions 7.3.0 and below.

Affected (CNA)

Vendor / product	Versions
TIBCO Software Inc. / TIBCO BusinessConnect	affected unspecified through 7.3.0

CWE

No CWE identifiers supplied.

References

https://www.tibco.com/services/support/advisories

ADP enrichment

CVE

No English description supplied.

https://www.tibco.com/services/support/advisories

CISA-ADP

No English description supplied.

No references supplied.