CVE-2023-26218
CVSS V2 None
CVSS V3 None
Description
The Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains easily exploitable Reflected Cross Site Scripting (XSS) vulnerabilities that allow a low privileged attacker to social engineer a legitimate user with network access to execute scripts targeting the affected system or the victim's local system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO Nimbus: versions 10.6.0 and below.
Overview
- CVE ID
- CVE-2023-26218
- Assigner
- tibco
- Vulnerability Status
- PUBLISHED
- Published Version
- 2023-09-29T17:07:11.618Z
- Last Modified Date
- 2023-09-29T17:07:11.618Z
Weakness Enumerations
References
| Reference URL | Reference Tags |
|---|---|
| https://www.tibco.com/services/support/advisories |
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2023-26218 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-26218 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2024-06-24 23:19:14 | Added to TrackCVE |