Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2022-12-06	CVE-2022-41560	Unspecified vulnerability in Tibco Nimbus 10.5.0 The Statement Set Upload via the Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute a Denial of Service Attack on the affected system. network low complexity tibco	6.5
2021-10-26	CVE-2021-35499	Cross-site Scripting vulnerability in Tibco Nimbus The Web Reporting component of TIBCO Software Inc.'s TIBCO Nimbus contains easily exploitable Stored Cross Site Scripting (XSS) vulnerabilities that allow a low privileged attacker to social engineer a legitimate user with network access to execute scripts targeting the affected system or the victim's local system. network low complexity tibco CWE-79	5.4