CVE-2022-22769

The Web server component of TIBCO Software Inc.'s TIBCO EBX, TIBCO EBX, TIBCO EBX, TIBCO EBX Add-ons, TIBCO EBX Add-ons, TIBCO EBX Add-ons, and TIBCO Product and Service Catalog powered by TIBCO EBX contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute Stored Cross Site Scripting (XSS) on the affected system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO EBX: versions 5.8.124 and below, TIBCO EBX: versions 5.9.3, 5.9.4, 5.9.5, 5.9.6, 5.9.7, 5.9.8, 5.9.9, 5.9.10, 5.9.11, 5.9.12, 5.9.13, 5.9.14, and 5.9.15, TIBCO EBX: versions 6.0.0, 6.0.1, 6.0.2, and 6.0.3, TIBCO EBX Add-ons: versions 3.20.18 and below, TIBCO EBX Add-ons: versions 4.1.0, 4.2.0, 4.2.1, 4.2.2, 4.3.0, 4.3.1, 4.3.2, 4.3.3, 4.3.4, 4.4.0, 4.4.1, 4.4.2, 4.4.3, 4.5.0, 4.5.1, 4.5.2, 4.5.3, 4.5.4, 4.5.5, and 4.5.6, TIBCO EBX Add-ons: versions 5.0.0, 5.0.1, 5.1.0, 5.1.1, and 5.2.0, and TIBCO Product and Service Catalog powered by TIBCO EBX: versions 1.1.0 and below.

• CWE-79

• https://www.tibco.com/services/support/advisoriesThird Party Advisory
• https://www.tibco.com/support/advisories/2022/01/tibco-security-advisory-january-19-2022-tibco-ebx-2022-22769Third Party Advisory
• https://www.tibco.com/services/support/advisoriesThird Party Advisory
• https://www.tibco.com/support/advisories/2022/01/tibco-security-advisory-january-19-2022-tibco-ebx-2022-22769Third Party Advisory

Published

Jan 19, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-22762Under certain circumstances, a JavaScript alert (or prompt) …4.3
• CVE-2022-22763When a worker is shutdown, it was possible to cause script t…8.8
• CVE-2022-22764Mozilla developers Paul Adenot and the Mozilla Fuzzing Team …8.8
• CVE-2022-22765BD Viper LT system, versions 2.0 and later, contains hardcod…7.8
• CVE-2022-22766Hardcoded credentials are used in specific BD Pyxis products…5.5
• CVE-2022-22767Specific BD Pyxis™ products were installed with default cred…8.8
• CVE-2022-2277Improper Input Validation vulnerability exists in the Hitach…7.5
• CVE-2022-22770The Web Server component of TIBCO Software Inc.'s TIBCO Audi…9.8
• CVE-2022-22771The Server component of TIBCO Software Inc.'s TIBCO JasperRe…8.8
• CVE-2022-22772The cfsend, cfrecv, and CyberResp components of TIBCO Softwa…7.5
• CVE-2022-22773The REST API component of TIBCO Software Inc.'s TIBCO Jasper…5.4
• CVE-2022-22774The DOM XML parser and SAX XML parser components of TIBCO So…9.1