CVSS: 8.7EPSS: 0%CPEs: 4EXPL: 0CVE-2022-30576 – TIBCO Statistica Stored Cross Site Scripting (XSS) Vulnerability
https://notcve.org/view.php?id=CVE-2022-30576
16 Aug 2022 — The Web Console component of TIBCO Software Inc.'s TIBCO Data Science - Workbench, TIBCO Statistica, TIBCO Statistica - Estore Edition, and TIBCO Statistica Trial contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute Stored Cross Site Scripting (XSS) on the affected system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO Data Science - W... • https://www.tibco.com/services/support/advisories • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 7.3EPSS: 0%CPEs: 4EXPL: 0CVE-2022-30575 – TIBCO Statistica Reflected Cross Site Scripting (XSS) Vulnerability
https://notcve.org/view.php?id=CVE-2022-30575
16 Aug 2022 — The Web Console component of TIBCO Software Inc.'s TIBCO Data Science - Workbench, TIBCO Statistica, TIBCO Statistica - Estore Edition, and TIBCO Statistica Trial contains easily exploitable Reflected Cross Site Scripting (XSS) vulnerabilities that allow a low privileged attacker with network access to execute scripts targeting the affected system or the victim's local system. Affected releases are TIBCO Software Inc.'s TIBCO Data Science - Workbench: versions 14.0.0 and below, TIBCO Statistica: versions 14... • https://www.tibco.com/services/support/advisories • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 7.6EPSS: 0%CPEs: 1EXPL: 0CVE-2018-18807 – TIBCO Statistica Server Vulnerable to Cross Site Scripting
https://notcve.org/view.php?id=CVE-2018-18807
26 Nov 2018 — The web application of the TIBCO Statistica component of TIBCO Software Inc.'s TIBCO Statistica Server contains vulnerabilities which may allow an authenticated user to perform cross-site scripting (XSS) attacks. Affected releases are TIBCO Software Inc.'s TIBCO Statistica Server versions up to and including 13.4.0. La aplicación web del componente TIBCO Statistica, del servidor TIBCO Statistica de TIBCO Software Inc., contiene vulnerabilidades que podrían permitir a un usuario autenticado realizar ataques ... • http://www.securityfocus.com/bid/106021 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •