CVE-2019-17338 – TIBCO Patterns - Search Exposes Cross Site Scripting Vulnerabilities

https://notcve.org/view.php?id=CVE-2019-17338

The user interface component of TIBCO Software Inc.'s TIBCO Patterns - Search contains multiple vulnerabilities that theoretically allow authenticated users to perform persistent cross-site scripting (XSS) attacks. Affected releases are TIBCO Software Inc.'s TIBCO Patterns - Search: versions 5.4.0 and below. El componente interfaz de usuario de TIBCO Patterns - Search de TIBCO Software Inc, contiene múltiples vulnerabilidades que teóricamente permiten a usuarios autenticados llevar a cabo ataques de tipo cross-site scripting (XSS) persistentes. • http://www.tibco.com/services/support/advisories https://www.tibco.com/support/advisories/2020/01/tibco-security-advisory-january-28-2020-tibco-patterns • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •