What is CVE-2023-26215?

CVE-2023-26215 is a vulnerability in the server component of TIBCO Software Inc.'s TIBCO EBX Add-ons that allows an attacker with low-privileged application access to read system files.

How severe is CVE-2023-26215?

CVE-2023-26215 has a severity rating of 6.5 (high).

Which versions of TIBCO EBX Add-ons are affected by CVE-2023-26215?

TIBCO EBX Add-ons versions 4.5.16 and below are affected by CVE-2023-26215.

How can an attacker exploit CVE-2023-26215?

An attacker with low-privileged application access can exploit CVE-2023-26215 to read system files accessible to the web server.

Is there a fix for CVE-2023-26215?

At the moment, there is no known fix for CVE-2023-26215. It is recommended to follow the official advisories and updates from TIBCO Software Inc.

Vulnerability/
CVE-2023-26215

high

7.7

CWE

22 203

25/5/2023

16/1/2025

CVE-2023-26215: TIBCO EBX® Add-ons Path Traversal

First published: Thu May 25 2023(Updated: )

The server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains a vulnerability that allows an attacker with low-privileged application access to read system files that are accessible to the web server. Affected releases are TIBCO Software Inc.'s TIBCO EBX Add-ons: versions 4.5.16 and below.

Credit: security@tibco.com security@tibco.com

Affected Software	Affected Version	How to fix
TIBCO EBX Add-ons	<4.5.17

Remedy

TIBCO has released updated versions of the affected components which address these issues. TIBCO EBX Add-ons versions 4.5.16 and below: update to version 4.5.17 or later

Never miss a vulnerability like this again

Reference Links

https://www.tibco.com/services/support/advisories

Frequently Asked Questions

What is CVE-2023-26215?
CVE-2023-26215 is a vulnerability in the server component of TIBCO Software Inc.'s TIBCO EBX Add-ons that allows an attacker with low-privileged application access to read system files.
How severe is CVE-2023-26215?
CVE-2023-26215 has a severity rating of 6.5 (high).
Which versions of TIBCO EBX Add-ons are affected by CVE-2023-26215?
TIBCO EBX Add-ons versions 4.5.16 and below are affected by CVE-2023-26215.
How can an attacker exploit CVE-2023-26215?
An attacker with low-privileged application access can exploit CVE-2023-26215 to read system files accessible to the web server.
Is there a fix for CVE-2023-26215?
At the moment, there is no known fix for CVE-2023-26215. It is recommended to follow the official advisories and updates from TIBCO Software Inc.

collector/nvd-latest
vendor/tibco
product/ebx add-ons
canonical/tibco ebx add-ons
collector/nvd-index
agent/type
agent/softwarecombine
agent/references
agent/title
agent/remedy
agent/severity
agent/description
agent/first-publish-date
agent/event
collector/mitre-cve
source/MITRE
collector/nvd-api
source/NVD
agent/software-canonical-lookup
agent/weakness
agent/last-modified-date
agent/author
agent/tags
agent/source

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.