CVE-2023-26216

EUVD-2023-30041 · Published May 25, 2023

The server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an exploitable vulnerability that allows an attacker to upload files to a directory accessible by the web server. Affected releases are TIBCO Software Inc.'s TIBCO EBX Add-ons: versions 4.5.16 and below.

Technologies

Tibco Ebx Add-Ons

Weaknesses

CWE-22

CVSS scores

v3.17.2CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access

T1190Exploit Public-Facing Application

References

https://www.tibco.com/services/support/advisories

Potentially impacted assets

See if this affects your attack surface