Known vulnerabilities in TIBCO EBX Add-ons

Known vulnerabilities in TIBCO EBX Add-ons

Vendor: TIBCO

Software: TIBCO EBX Add-ons

Software CPE: cpe:2.3:a:tibco:tibco_ebx_add-ons:*:*:*:*:*:*:*:*

Website: https://www.tibco.com/

Total vulnerabilities: 9

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Vulnerabilities (9)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU78449 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2023-26217	CWE-89	Medium	No	No	4.5.18, 5.6.3, 6.1.1	20.07.2023	SB2023072025
#VU76534 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2023-26216	CWE-22	Low	No	No	4.5.17	26.05.2023	SB2023052502
#VU76488 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2023-26215	CWE-22	Medium	No	No	4.5.17	25.05.2023	SB2023052502
#VU76141 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-41566	CWE-79	Low	No	No	5.6.1	15.05.2023	SB2023051512
#VU67561 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-30578	CWE-79	Low	No	No	5.4.2	22.09.2022	SB2022092204
#VU59876 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-22769	CWE-79	Low	No	No	3.20.19, 4.5.7, 5.2.1	20.01.2022	SB2022012011
#VU49494 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2020-27148	CWE-611	Medium	No	No	4.4.3	12.01.2021	SB2021011303
#VU22735 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2019-17332	CWE-79	Low	No	No	3.20.14, 4.3.0	13.11.2019	SB2019111324
#VU22734 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2019-17331	CWE-79	Low	No	No	3.20.14, 4.2.0	13.11.2019	SB2019111325