CVE-2023-26218
High
Description
The Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains easily exploitable Reflected Cross Site Scripting (XSS) vulnerabilities that allow a low privileged attacker to social engineer a legitimate user with network access to execute scripts targeting the affected system or the victim's local system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO Nimbus: versions 10.6.0 and below.
SeverityHigh
CVSS8.0
Exploit probability—
ProductTibco Nimbus
PublishedSep 29, 2023
First seenSep 29, 2023
Weakness typeCWE-79Cross-site scripting (XSS)
How to fix
Update
- tibco nimbus10.6.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tibco nimbus | v < 10.6.1 | 10.6.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.