Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-28827

Опубликовано: 20 апр. 2021
Источник: nvd
CVSS3: 9.6
CVSS3: 9.6
CVSS2: 6.8
EPSS Низкий

Описание

The Administration GUI component of TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric, TIBCO Administrator - Enterprise Edition for z/Linux, TIBCO Administrator - Enterprise Edition for z/Linux, TIBCO Runtime Agent, TIBCO Runtime Agent, TIBCO Runtime Agent for z/Linux, and TIBCO Runtime Agent for z/Linux contains an easily exploitable vulnerability that allows an unauthenticated attacker to social engineer a legitimate user with network access to execute a Stored XSS attack targeting the affected system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition: versions 5.10.2 and below, TIBCO Administrator - Enterprise Edition: versions 5.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:tibco:administrator:*:*:*:*:enterprise:*:*:*
Версия до 5.10.2 (включая)
cpe:2.3:a:tibco:administrator:*:*:*:*:enterprise:silver_fabric:*:*
Версия до 5.10.2 (включая)
cpe:2.3:a:tibco:administrator:*:*:*:*:enterprise:z\/linux:*:*
Версия до 5.10.2 (включая)
cpe:2.3:a:tibco:administrator:5.11.0:*:*:*:enterprise:*:*:*
cpe:2.3:a:tibco:administrator:5.11.0:*:*:*:enterprise:silver_fabric:*:*
cpe:2.3:a:tibco:administrator:5.11.0:*:*:*:enterprise:z\/linux:*:*
cpe:2.3:a:tibco:administrator:5.11.1:*:*:*:enterprise:*:*:*
cpe:2.3:a:tibco:administrator:5.11.1:*:*:*:enterprise:silver_fabric:*:*
cpe:2.3:a:tibco:administrator:5.11.1:*:*:*:enterprise:z\/linux:*:*
cpe:2.3:a:tibco:runtime_agent:*:*:*:*:*:*:*:*
Версия до 5.10.2 (включая)
cpe:2.3:a:tibco:runtime_agent:*:*:*:*:*:z\/linux:*:*
Версия до 5.10.2 (включая)
cpe:2.3:a:tibco:runtime_agent:5.11.0:*:*:*:*:*:*:*
cpe:2.3:a:tibco:runtime_agent:5.11.0:*:*:*:*:z\/linux:*:*
cpe:2.3:a:tibco:runtime_agent:5.11.1:*:*:*:*:*:*:*
cpe:2.3:a:tibco:runtime_agent:5.11.1:*:*:*:*:z\/linux:*:*

EPSS

Процентиль: 69%
0.00609
Низкий

9.6 Critical

CVSS3

9.6 Critical

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

github
больше 3 лет назад

The Administration GUI component of TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric, TIBCO Administrator - Enterprise Edition for z/Linux, TIBCO Administrator - Enterprise Edition for z/Linux, TIBCO Runtime Agent, TIBCO Runtime Agent, TIBCO Runtime Agent for z/Linux, and TIBCO Runtime Agent for z/Linux contains an easily exploitable vulnerability that allows an unauthenticated attacker to social engineer a legitimate user with network access to execute a Stored XSS attack targeting the affected system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition: versions 5.10.2 and below, TIBCO Administrator - Enterprise Edition: versions...

EPSS

Процентиль: 69%
0.00609
Низкий

9.6 Critical

CVSS3

9.6 Critical

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-79