CVE-2022-22775
High
Description
The Workspace client component of TIBCO Software Inc.'s TIBCO BPM Enterprise and TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric contains difficult to exploit Reflected Cross Site Scripting (XSS) vulnerabilities that allow low privileged attackers with network access to execute scripts targeting the affected system or the victim's local system. Affected releases are TIBCO Software Inc.'s TIBCO BPM Enterprise: versions 4.3.1 and below and TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric: versions 4.3.1 and below.
SeverityHigh
CVSS8.1
Exploit probability—
ProductTibco Bpm Enterprise
PublishedMay 17, 2022
First seenMay 17, 2022
How to fix
Update
- tibco bpm_enterprise4.3.2 or later
- tibco bpm_enterprise_distribution_for_silver_fabric4.3.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tibco bpm_enterprise | v < 4.3.2 | 4.3.2 |
| tibco bpm_enterprise_distribution_for_silver_fabric | v < 4.3.2 | 4.3.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.