Vulnerabilities > Tibco > BPM Enterprise > Medium

DATE CVE VULNERABILITY TITLE RISK
2021-01-26 CVE-2021-23272 Cross-site Scripting vulnerability in Tibco products
The Application Development Clients component of TIBCO Software Inc.'s TIBCO BPM Enterprise and TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric contains a vulnerability that theoretically allows a low privileged attacker with network access to execute a Cross Site Scripting (XSS) attack on the affected system.
network
low complexity
tibco CWE-79
5.4