CVSS: 9.0EPSS: 0%CPEs: 1EXPL: 0CVE-2023-26218 – TIBCO Nimbus Reflected Cross-site Scripting (XSS) vulnerabilities
https://notcve.org/view.php?id=CVE-2023-26218
The Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains easily exploitable Reflected Cross Site Scripting (XSS) vulnerabilities that allow a low privileged attacker to social engineer a legitimate user with network access to execute scripts targeting the affected system or the victim's local system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO Nimbus: versions 10.6.0 and below. • https://www.tibco.com/services/support/advisories • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2022-41560 – TIBCO Nimbus Denial of Service Vulnerability
https://notcve.org/view.php?id=CVE-2022-41560
The Statement Set Upload via the Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute a Denial of Service Attack on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO Nimbus: version 10.5.0. El componente Statement Set Upload via Web Client de TIBCO Nimbus de TIBCO Software Inc. contiene una vulnerabilidad fácilmente explotable que permite a un atacante con pocos privilegios y acceso a la red ejecutar un ataque de Denegación de Servicio (DoS) en el sistema afectado. • https://www.tibco.com/services/support/advisories •
CVSS: 9.3EPSS: 0%CPEs: 1EXPL: 0CVE-2022-41559 – TIBCO Nimbus Open Redirect Vulnerability
https://notcve.org/view.php?id=CVE-2022-41559
The Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains an easily exploitable vulnerability that allows an unauthenticated attacker with network access to exploit an open redirect on the affected system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO Nimbus: version 10.5.0. • https://www.tibco.com/services/support/advisories • CWE-601: URL Redirection to Untrusted Site ('Open Redirect') •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2022-24967
https://notcve.org/view.php?id=CVE-2022-24967
Black Rainbow NIMBUS before 3.7.0 allows stored Cross-site Scripting (XSS). Black Rainbow NIMBUS versiones anteriores a 3.7.0, permite una vulnerabilidad de tipo Cross-site Scripting (XSS) almacenado • https://blackrainbow.com/corporate https://excellium-services.com/cert-xlm-advisory/CVE-2022-24967 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 8.0EPSS: 0%CPEs: 1EXPL: 0CVE-2021-35499 – TIBCO Nimbus Stored Cross-site Scripting (XSS) vulnerabilities
https://notcve.org/view.php?id=CVE-2021-35499
The Web Reporting component of TIBCO Software Inc.'s TIBCO Nimbus contains easily exploitable Stored Cross Site Scripting (XSS) vulnerabilities that allow a low privileged attacker to social engineer a legitimate user with network access to execute scripts targeting the affected system or the victim's local system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO Nimbus: versions 10.4.0 and below. • https://www.tibco.com/services/support/advisories https://www.tibco.com/support/advisories/2021/10/tibco-security-advisory-october-26-2021-tibco-nimbus-2021-35499 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •