Description
The iWay Service Manager Console component of TIBCO Software Inc.'s TIBCO iWay Service Manager contains easily exploitable Reflected Cross Site Scripting (XSS) vulnerabilities that allow a low privileged attacker with network access to execute scripts targeting the affected system or the victim's local system. Affected releases are TIBCO Software Inc.'s TIBCO iWay Service Manager: versions 8.0.6 and below.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| TIBCO Software | TIBCO iWay Service Manager | unspecified – ≤ 8.0.6 | — |