Skip to content
OpenAdvisories
High · 7.3 CVE-2023-26214 EUVD-2023-30039GHSA-88fg-35x5-9f8p

TIBCO BusinessConnect Reflected XSS Vulnerability

Published Feb 22, 2023 · Updated Mar 12, 2025 · Assigned by tibco

Description

The BusinessConnect UI component of TIBCO Software Inc.'s TIBCO BusinessConnect contains easily exploitable Reflected Cross Site Scripting (XSS) vulnerabilities that allow a low privileged attacker with network access to execute scripts targeting the affected system or the victim's local system. Affected releases are TIBCO Software Inc.'s TIBCO BusinessConnect: versions 7.3.0 and below.

Affected products

VendorProductAffectedFixed
TIBCO Software TIBCO BusinessConnect unspecified – ≤ 7.3.0 —

References