CVE-2022-30578

The Web Server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute Stored Cross Site Scripting (XSS) on the affected system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO EBX Add-ons: versions 5.4.1 and below.

• CWE-79
• CWE-79

• https://www.tibco.com/services/support/advisoriesVendor Advisory
• https://www.tibco.com/support/advisories/2022/09/tibco-security-advisory-sep-21-2022-ebx-add-ons-cve-2022-30578Vendor Advisory
• https://www.tibco.com/support/advisories/2022/09/tibco-security-advisory-september-21-2022-tibco-ebx-add-ons-cve-2022Vendor Advisory
• https://www.tibco.com/services/support/advisoriesVendor Advisory
• https://www.tibco.com/support/advisories/2022/09/tibco-security-advisory-sep-21-2022-ebx-add-ons-cve-2022-30578Vendor Advisory
• https://www.tibco.com/support/advisories/2022/09/tibco-security-advisory-september-21-2022-tibco-ebx-add-ons-cve-2022Vendor Advisory

Published

Sep 21, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-30572The iWay Service Manager Console component of TIBCO Software…6.5
• CVE-2022-30573The ftlserver component of TIBCO Software Inc.'s TIBCO FTL -…8.8
• CVE-2022-30574The ftlserver component of TIBCO Software Inc.'s TIBCO FTL -…7.8
• CVE-2022-30575The Web Console component of TIBCO Software Inc.'s TIBCO Dat…5.4
• CVE-2022-30576The Web Console component of TIBCO Software Inc.'s TIBCO Dat…5.4
• CVE-2022-30577The Web Server component of TIBCO Software Inc.'s TIBCO EBX …9
• CVE-2022-30579The Web Player component of TIBCO Software Inc.'s TIBCO Spot…8.4
• CVE-2022-3058Use after free in Sign-In Flow in Google Chrome prior to 105…8.8
• CVE-2022-30580Code injection in Cmd.Start in os/exec before Go 1.17.11 and…7.8
• CVE-2022-30584Archer Platform 6.3 before 6.11 (6.11.0.0) contains an Impro…8.8
• CVE-2022-30585The REST API in Archer Platform 6.x before 6.11 (6.11.0.0) c…6.5
• CVE-2022-30586Gradle Enterprise through 2022.2.2 has Incorrect Access Cont…7.2