CVE-2022-41560: TIBCO Nimbus Denial of Service Vulnerability

Published Dec 6, 2022

Updated

The Statement Set Upload via the Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute a Denial of Service Attack on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO Nimbus: version 10.5.0.

Affected Software

1 affected component

TIBCO Nimbus=10.5.0

Remediation

Information

TIBCO has released updated versions of the affected components which address these issues. TIBCO Nimbus version 10.5.0: update to version 10.5.1 or later

Event History

Dec 6, 2022

CVE Published

07:15 PM

Dec 12, 2022

CVE Published

via MITRE·01:49 AM

Data Sourced

via MITRE·01:49 AM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2022-41560?

CVE-2022-41560 is a vulnerability in the Statement Set Upload via the Web Client component of TIBCO Software Inc.'s TIBCO Nimbus.

What is the severity of CVE-2022-41560?

CVE-2022-41560 has a severity level of medium.

How can a low privileged attacker exploit CVE-2022-41560?

A low privileged attacker with network access can execute a Denial of Service Attack on the affected system.

Which version of TIBCO Nimbus is affected by CVE-2022-41560?

Version 10.5.0 of TIBCO Nimbus is affected by CVE-2022-41560.

Where can I find more information about CVE-2022-41560?

You can find more information about CVE-2022-41560 on the TIBCO Software Inc. website.