CVE-2019-17332

MEDIUM 5.4CVE-2019-17332 · Published 12/11/2019 · updated 17/06/2026

In short

CVE-2019-17332 is a MEDIUM (CVSS 5.4) vulnerability affecting ebx add-ons (tibco).
Chance of exploitation in the next 30 days (EPSS): 0.72%, higher than 53.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
ebx add-ons tibco	`= 4.1.0= 4.2.0= 4.2.1= 4.2.2≤ 3.20.13`	No fix yet

Description

The Digital Asset Manager Web Interface component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains a vulnerability that theoretically allows authenticated users to perform stored cross-site scripting (XSS) attacks. Affected releases are TIBCO Software Inc.'s TIBCO EBX Add-ons: versions up to and including 3.20.13, versions 4.1.0, 4.2.0, 4.2.1, and 4.2.2.

References

tibco.com/services/support/advisories · Vendor Advisory
tibco.com/support/advisories/2019/11/tibco-security-advisory-november-12-2019-tibco-ebx-add-on-2019-17332 · Vendor Advisory

More vulnerabilities in ebx add-ons

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

ebx add-ons

tibco

= 4.1.0= 4.2.0= 4.2.1= 4.2.2≤ 3.20.13

No fix yet

Description

More vulnerabilities in ebx add-ons

See all →