CVE-2022-22777: TIBCO BusinessConnect Trading Community Management Reflected Cross Site Scripting Vulnerability
The Web Server component of TIBCO Software Inc.'s TIBCO BusinessConnect Trading Community Management contains easily exploitable Reflected Cross Site Scripting (XSS) vulnerabilities that allow an unauthenticated attacker with network access to execute scripts targeting the affected system or the victim's local system. Affected releases are TIBCO Software Inc.'s TIBCO BusinessConnect Trading Community Management: versions 6.1.0 and below.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2022-22777?
CVE-2022-22777 is a vulnerability in the Web Server component of TIBCO BusinessConnect Trading Community Management that allows for Reflected Cross Site Scripting (XSS) attacks.
What is the severity of CVE-2022-22777?
CVE-2022-22777 has a severity rating of 6.1 (medium).
How can an attacker exploit CVE-2022-22777?
An unauthenticated attacker with network access can exploit CVE-2022-22777 to execute scripts targeting the affected system or the victims.
What is the affected software for CVE-2022-22777?
The affected software for CVE-2022-22777 is TIBCO BusinessConnect Trading Community Management version up to and excluding 6.1.1.
How can I fix CVE-2022-22777?
To fix CVE-2022-22777, it is recommended to update TIBCO BusinessConnect Trading Community Management to a version that includes the necessary security patches.