CVE-2020-27148

Опубликовано: 12 янв. 2021

Источник: nvd

CVSS3: 7.1

CVSS2: 5.5

EPSS Низкий

Описание

The TIBCO EBX Add-on for Oracle Hyperion EPM, TIBCO EBX Data Exchange Add-on, and TIBCO EBX Insight Add-on components of TIBCO Software Inc.'s TIBCO EBX Add-ons contain a vulnerability that theoretically allows a low privileged attacker with network access to execute an XML External Entity (XXE) attack. Affected releases are TIBCO Software Inc.'s TIBCO EBX Add-ons: versions 4.4.2 and below.

Ссылки

http://www.tibco.com/services/support/advisories
Vendor Advisory
https://www.tibco.com/support/advisories/2021/01/tibco-security-advisory-january-12-2021-tibco-ebx
Vendor Advisory
https://www.tibco.com/support/advisories/2021/01/tibco-security-advisory-january-12-2021-tibco-ebx-add-ons
Vendor Advisory
http://www.tibco.com/services/support/advisories
Vendor Advisory
https://www.tibco.com/support/advisories/2021/01/tibco-security-advisory-january-12-2021-tibco-ebx
Vendor Advisory
https://www.tibco.com/support/advisories/2021/01/tibco-security-advisory-january-12-2021-tibco-ebx-add-ons
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:tibco:ebx_add-ons:*:*:*:*:*:*:*:*

Версия до 4.4.2 (включая)

EPSS

Процентиль: 68%

0.00574

Низкий

7.1 High

CVSS3

5.5 Medium

CVSS2

Дефекты

CWE-611

Связанные уязвимости

GHSA-x33g-fm74-m47v

github

больше 3 лет назад