Skip to content
OpenAdvisories
High · 7.3 CVE-2022-41567 EUVD-2022-44759GHSA-c373-c8hq-9394

TIBCO BusinessConnect Stored XSS Vulnerability

Published Feb 22, 2023 · Updated Mar 12, 2025 · Assigned by tibco

Description

The BusinessConnect UI component of TIBCO Software Inc.'s TIBCO BusinessConnect contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute a cross-site scripting (XSS) attack on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO BusinessConnect: versions 7.3.0 and below.

Affected products

VendorProductAffectedFixed
TIBCO Software TIBCO BusinessConnect unspecified – ≤ 7.3.0 —

References