CVE-2022-41567

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

The BusinessConnect UI component of TIBCO Software Inc.'s TIBCO BusinessConnect contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute a cross-site scripting (XSS) attack on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO BusinessConnect: versions 7.3.0 and below.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
TIBCO Software Inc.	TIBCO BusinessConnect	>= unspecified, <= 7.3.0

References

https://www.tibco.com/services/support/advisoriesVendor Advisory
https://www.tibco.com/services/support/advisoriesVendor Advisory

Timeline

Published: Feb 22, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-415687.5LINE client for iOS before 12.17.0 might be crashed by sharing an invalid shared key of e2ee in group chat.CVE-2022-41574.9The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cg_option_id PO CVE-2022-415709.8An issue was discovered in EyesOfNetwork (EON) through 5.3.11. Unauthenticated SQL injection can occur.CVE-2022-415719.8An issue was discovered in EyesOfNetwork (EON) through 5.3.11. Local file inclusion can occur.CVE-2022-415729.8An issue was discovered in EyesOfNetwork (EON) through 5.3.11. Privilege escalation can be accomplished on the server because nmap can be ru CVE-2022-415739.8An issue was discovered in Ovidentia 8.3. The file upload feature does not prevent the uploading of executable files. A user can upload a .p CVE-2022-415747.5An access-control vulnerability in Gradle Enterprise 2022.4 through 2022.3.1 allows remote attackers to prevent backups from occurring, and CVE-2022-415757.5A credential-exposure vulnerability in the support-bundle mechanism in Gradle Enterprise 2022.3 through 2022.3.3 allows remote attackers to CVE-2022-415767.8The rphone module has a script that can be maliciously modified.Successful exploitation of this vulnerability may cause irreversible program CVE-2022-415777.1The kernel server has a vulnerability of not verifying the length of the data transferred in the user space.Successful exploitation of this CVE-2022-415789.8The MPTCP module has an out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause root privilege escalation CVE-2022-415796.5There is an insufficient authentication vulnerability in some Huawei band products. Successful exploit could allow the attacker to spoof the