Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-22763 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-16T14:29:54.217Z Vendors: Mozilla Products: Firefox, Thunderbird, Firefox ESR Problem Types: Script Execution during invalid object state Description: When a worker is shutdown, it was possible to cause script to run late in the lifecycle, at a point after where it should not be possible. This vulnerability affects Firefox < 96, Thunderbird < 91.6, and Firefox ESR < 91.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-05/ - https://www.mozilla.org/security/advisories/mfsa2022-06/ - https://www.mozilla
la.org/security/advisories/mfsa2022-05/ - https://www.mozilla.org/security/advisories/mfsa2022-06/ - https://www.mozilla.org/security/advisories/mfsa2022-01/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1740534
CVE ID: CVE-2022-22764 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-16T14:28:39.041Z Vendors: Mozilla Products: Firefox, Thunderbird, Firefox ESR Problem Types: Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6 Description: Mozilla developers Paul Adenot and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 96 and Firefox ESR 91.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 97, Thunderbird < 91.6, and Firefox ESR < 91.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP
Firefox < 97, Thunderbird < 91.6, and Firefox ESR < 91.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-05/ - https://www.mozilla.org/security/advisories/mfsa2022-04/ - https://www.mozilla.org/security/advisories/mfsa2022-06/ - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1742682%2C1744165%2C1746545%2C1748210%2C1748279
CVE ID: CVE-2022-22765 State: PUBLISHED Published: 2022-02-12T02:30:40.024621Z Last Updated: 2024-09-17T02:58:09.300Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L) Vendors: Becton Dickinson (BD) Products: BD Viper LT System Problem Types: CWE-798 Description: BD Viper LT system, versions 2.0 and later, contains hardcoded credentials. If exploited, threat actors may be able to access, modify or delete sensitive information, including electronic protected health information (ePHI), protected health information (PHI) and personally identifiable information (PII). BD Viper LT system versions 4.0 and later utilize Microsoft Windows 10 and have additional Operating System ha
on (PII). BD Viper LT system versions 4.0 and later utilize Microsoft Windows 10 and have additional Operating System hardening configurations which increase the attack complexity required to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://cybersecurity.bd.com/bulletins-and-patches/bd-viper-lt-system-%E2%80%93-hardcoded-credentials - https://www.cisa.gov/uscert/ics/advisories/icsma-22-062-02
CVE ID: CVE-2022-22766 State: PUBLISHED Published: 2022-02-11T18:12:07.247407Z Last Updated: 2024-09-16T19:15:26.998Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Becton Dickinson (BD) Products: BD Pyxis Anesthesia Station ES, BD Pyxis Anesthesia Station 4000, BD Pyxis CATO, BD Pyxis CIISafe, BD Pyxis Inventory Connect, BD Pyxis IV Prep, BD Pyxis JITrBUD, BD Pyxis KanBan RF, BD Pyxis Logistics, BD Pyxis Med Link Family, BD Pyxis MedBank, BD Pyxis MedStation 4000, BD Pyxis MedStation ES, BD Pyxis MedStation ES Server, BD Pyxis ParAssist, BD Pyxis PharmoPack, BD Pyxis ProcedureStation (including EC), BD Pyxis Rapid Rx, BD Pyxis StockStation, BD Pyxis SupplyCent
yxis PharmoPack, BD Pyxis ProcedureStation (including EC), BD Pyxis Rapid Rx, BD Pyxis StockStation, BD Pyxis SupplyCenter, BD Pyxis SupplyRoller, BD Pyxis SupplyStation (including RF, EC, CP), BD Pyxis Track and Deliver, BD Rowa Pouch Packaging Systems Problem Types: CWE-798 Description: Hardcoded credentials are used in specific BD Pyxis products. If exploited, threat actors may be able to gain access to the underlying file system and could potentially exploit application files for information that could be used to decrypt application credentials or gain access to electronic protected health information (ePHI) or other sensitive information. Additional Analyst Notes: - CVE Program Containe
nic protected health information (ePHI) or other sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://cybersecurity.bd.com/bulletins-and-patches/bd-pyxis-products---hardcoded-credentials - https://www.cisa.gov/uscert/ics/advisories/icsma-22-062-01
CVE ID: CVE-2022-22767 State: PUBLISHED Published: 2022-06-01T16:35:38.991672Z Last Updated: 2024-09-16T16:42:50.707Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Becton Dickinson (BD) Products: BD Pyxis™ Anesthesia ES Station, BD Pyxis™ CIISafe, BD Pyxis™ Logistics, BD Pyxis™ MedBank, BD Pyxis™ MedStation™ 4000, BD Pyxis™ MedStation™ ES, BD Pyxis™ MedStation™ ES Server, BD Pyxis™ ParAssist, BD Pyxis™ Rapid Rx, BD Pyxis™ StockStation, BD Pyxis™ SupplyCenter, BD Pyxis™ SupplyRoller, BD Pyxis™ SupplyStation™, BD Pyxis™ SupplyStation™ EC, BD Pyxis™ SupplyStation™ RF auxiliary, BD Rowa™ Pouch Packaging Systems Problem Types: CWE-262 Description: Specific BD Pyx
Pyxis™ SupplyStation™ RF auxiliary, BD Rowa™ Pouch Packaging Systems Problem Types: CWE-262 Description: Specific BD Pyxis™ products were installed with default credentials and may presently still operate with these credentials. There may be scenarios where BD Pyxis™ products are installed with the same default local operating system credentials or domain-joined server(s) credentials that may be shared across product types. If exploited, threat actors may be able to gain privileged access to the underlying file system and could potentially exploit or gain access to ePHI or other sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://cybersecurity.bd.c
other sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://cybersecurity.bd.com/bulletins-and-patches/bd-pyxis-products-default-credentials
CVE ID: CVE-2022-22769 State: PUBLISHED Published: 2022-01-19T19:25:10.795687Z Last Updated: 2024-09-17T00:16:09.810Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: TIBCO Software Inc. Products: TIBCO EBX, TIBCO EBX Add-ons, TIBCO Product and Service Catalog powered by TIBCO EBX Problem Types: In the worst case, if the victim is a privileged administrator, successful execution of these vulnerabilities can result in an attacker gaining full administrative access to the affected system. Description: The Web server component of TIBCO Software Inc.'s TIBCO EBX, TIBCO EBX, TIBCO EBX, TIBCO EBX Add-ons, TIBCO EBX Add-ons, TIBCO EBX Add-ons, and TIBCO Product and Serv
.'s TIBCO EBX, TIBCO EBX, TIBCO EBX, TIBCO EBX Add-ons, TIBCO EBX Add-ons, TIBCO EBX Add-ons, and TIBCO Product and Service Catalog powered by TIBCO EBX contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute Stored Cross Site Scripting (XSS) on the affected system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO EBX: versions 5.8.124 and below, TIBCO EBX: versions 5.9.3, 5.9.4, 5.9.5, 5.9.6, 5.9.7, 5.9.8, 5.9.9, 5.9.10, 5.9.11, 5.9.12, 5.9.13, 5.9.14, and 5.9.15, TIBCO EBX: versions 6.0.0, 6.0.1, 6.0.2, and 6.0.3, TIBCO EB
5.9.9, 5.9.10, 5.9.11, 5.9.12, 5.9.13, 5.9.14, and 5.9.15, TIBCO EBX: versions 6.0.0, 6.0.1, 6.0.2, and 6.0.3, TIBCO EBX Add-ons: versions 3.20.18 and below, TIBCO EBX Add-ons: versions 4.1.0, 4.2.0, 4.2.1, 4.2.2, 4.3.0, 4.3.1, 4.3.2, 4.3.3, 4.3.4, 4.4.0, 4.4.1, 4.4.2, 4.4.3, 4.5.0, 4.5.1, 4.5.2, 4.5.3, 4.5.4, 4.5.5, and 4.5.6, TIBCO EBX Add-ons: versions 5.0.0, 5.0.1, 5.1.0, 5.1.1, and 5.2.0, and TIBCO Product and Service Catalog powered by TIBCO EBX: versions 1.1.0 and below. Additional Analyst Notes: - CVE Program Container: References: - https://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2022/01/tibco-security-advisory-january-19-2022-tibco-ebx-
support/advisories - https://www.tibco.com/support/advisories/2022/01/tibco-security-advisory-january-19-2022-tibco-ebx-2022-22769
CVE ID: CVE-2022-22770 State: PUBLISHED Published: 2022-02-15T18:00:11.463181Z Last Updated: 2024-09-16T22:36:51.954Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: TIBCO Software Inc. Products: TIBCO AuditSafe Problem Types: In the worst case, if the victim is a privileged administrator, successful execution of these vulnerabilities can result in an attacker gaining full administrative access to the API methods of the affected system. Description: The Web Server component of TIBCO Software Inc.'s TIBCO AuditSafe contains an easily exploitable vulnerability that allows an unauthenticated attacker with network access to execute API methods on the affected
itable vulnerability that allows an unauthenticated attacker with network access to execute API methods on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO AuditSafe: versions 1.1.0 and below. Additional Analyst Notes: - CVE Program Container: References: - https://www.tibco.com/services/support/advisories
CVE ID: CVE-2022-22771 State: PUBLISHED Published: 2022-03-15T17:05:11.270158Z Last Updated: 2024-09-17T02:57:15.084Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: TIBCO Software Inc. Products: TIBCO JasperReports Library, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO JasperReports Server for Microsoft Azure Problem Types: The impact of this vulnerability includes the theoretical possibility that a web server using the provided DefaultWebResourceHandler could expose details of the host system. The disclosed data could inc
erver using the provided DefaultWebResourceHandler could expose details of the host system. The disclosed data could include credentials to access other systems. Description: The Server component of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for ActiveMatrix BPM, and TIBCO JasperReports Server for Microsoft Azure contains a directory-traversal vulnerability that may theoretically allow web server users to access contents of the host system. Affected releases are TIBCO Software Inc.'s TIBCO JasperReports Library: version 7.9.0, TIBCO
tents of the host system. Affected releases are TIBCO Software Inc.'s TIBCO JasperReports Library: version 7.9.0, TIBCO JasperReports Library for ActiveMatrix BPM: version 7.9.0, TIBCO JasperReports Server: versions 7.9.0 and 7.9.1, TIBCO JasperReports Server for AWS Marketplace: versions 7.9.0 and 7.9.1, TIBCO JasperReports Server for ActiveMatrix BPM: versions 7.9.0 and 7.9.1, and TIBCO JasperReports Server for Microsoft Azure: version 7.9.1. Additional Analyst Notes: - CVE Program Container: References: - https://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2022/03/tibco-security-advisory-march-15-2022-tibco-jasperreports-library-2022-22771
CVE ID: CVE-2022-22772 State: PUBLISHED Published: 2022-03-30T16:40:10.158737Z Last Updated: 2024-09-16T21:08:01.606Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: TIBCO Software Inc. Products: TIBCO Managed File Transfer Platform Server for UNIX, TIBCO Managed File Transfer Platform Server for z/Linux Problem Types: Successful execution of this vulnerability can result in a low privileged attacker gaining full user access to the affected system. Description: The cfsend, cfrecv, and CyberResp components of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for UNIX and TIBCO Managed File Transfer Platform Server for z/Linux contain a difficult
d File Transfer Platform Server for UNIX and TIBCO Managed File Transfer Platform Server for z/Linux contain a difficult to exploit Remote Code Execution (RCE) vulnerability that allows a low privileged attacker with network access to execute arbitrary code on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for UNIX: versions 8.1.0 and below and TIBCO Managed File Transfer Platform Server for z/Linux: versions 8.1.0 and below. Additional Analyst Notes: - CVE Program Container: References: - https://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2022/03/tibco-security-advisory-march-30-2022-tibc
ervices/support/advisories - https://www.tibco.com/support/advisories/2022/03/tibco-security-advisory-march-30-2022-tibco-managed-file-transfer-2022-22772
CVE ID: CVE-2022-22773 State: PUBLISHED Published: 2022-05-17T17:30:13.151280Z Last Updated: 2024-09-16T20:36:15.644Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: TIBCO Software Inc. Products: TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO JasperReports Server for Microsoft Azure Problem Types: In the worst case, if the victim is a privileged administrator, successful execution of these vulnerabilities can result in an attacker gaining full administrative access to the affected sy
ssful execution of these vulnerabilities can result in an attacker gaining full administrative access to the affected system. Description: The REST API component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for ActiveMatrix BPM, and TIBCO JasperReports Server for Microsoft Azure contains difficult to exploit Reflected Cross Site Scripting (XSS) vulnerabilities that allow a low privileged attacker with network access to execute scripts targeting the affected system or the victim's local system. Affected releases are
ith network access to execute scripts targeting the affected system or the victim's local system. Affected releases are TIBCO Software Inc.'s TIBCO JasperReports Server: versions 8.0.1 and below, TIBCO JasperReports Server - Community Edition: versions 8.0.1 and below, TIBCO JasperReports Server - Developer Edition: versions 8.0.0 and below, TIBCO JasperReports Server for AWS Marketplace: versions 8.0.1 and below, TIBCO JasperReports Server for ActiveMatrix BPM: versions 7.9.2 and below, and TIBCO JasperReports Server for Microsoft Azure: versions 8.0.1 and below. Additional Analyst Notes: - CVE Program Container: References: - https://www.tibco.com/services/support/advisories - https://www.
l Analyst Notes: - CVE Program Container: References: - https://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2022/05/tibco-security-advisory-may-17-2022-tibco-jasperreports-server-cve-2022-22773
CVE ID: CVE-2022-22774 State: PUBLISHED Published: 2022-05-10T17:00:20.130816Z Last Updated: 2024-09-16T20:43:11.558Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N) Vendors: TIBCO Software Inc. Products: TIBCO Managed File Transfer Command Center, TIBCO Managed File Transfer Internet Server Problem Types: Successful execution of this vulnerability can result in unauthorized update, insert or delete access to data on the affected system and associated resources. Description: The DOM XML parser and SAX XML parser components of TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center, TIBCO Managed File Transfer Command Center, TIBCO Managed File Transfer Interne
CO Managed File Transfer Command Center, TIBCO Managed File Transfer Command Center, TIBCO Managed File Transfer Internet Server, and TIBCO Managed File Transfer Internet Server contains an easily exploitable vulnerability that allows an unauthenticated attacker with network access to execute XML External Entity (XXE) attacks on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center: versions 8.3.1 and below, TIBCO Managed File Transfer Command Center: versions 8.4.0 and 8.4.1, TIBCO Managed File Transfer Internet Server: versions 8.3.1 and below, and TIBCO Managed File Transfer Internet Server: versions 8.4.0 and 8.4.1. Additional Analyst
versions 8.3.1 and below, and TIBCO Managed File Transfer Internet Server: versions 8.4.0 and 8.4.1. Additional Analyst Notes: - CVE Program Container: References: - https://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2022/05/tibco-security-advisory-may-10-2022-tibco-mftcc-2022-22774
CVE ID: CVE-2022-22775 State: PUBLISHED Published: 2022-05-17T17:30:14.875715Z Last Updated: 2024-09-17T03:37:44.649Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: TIBCO Software Inc. Products: TIBCO BPM Enterprise, TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric Problem Types: In the worst case, if the victim is a privileged administrator, successful execution of these vulnerabilities can result in an attacker gaining full administrative access to the affected system. Description: The Workspace client component of TIBCO Software Inc.'s TIBCO BPM Enterprise and TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric contains difficult to exploit
Inc.'s TIBCO BPM Enterprise and TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric contains difficult to exploit Reflected Cross Site Scripting (XSS) vulnerabilities that allow low privileged attackers with network access to execute scripts targeting the affected system or the victim's local system. Affected releases are TIBCO Software Inc.'s TIBCO BPM Enterprise: versions 4.3.1 and below and TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric: versions 4.3.1 and below. Additional Analyst Notes: - CVE Program Container: References: - https://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2022/05/tibco-security-advisory-may-17-2022-tibco-acti
ces/support/advisories - https://www.tibco.com/support/advisories/2022/05/tibco-security-advisory-may-17-2022-tibco-activematrix-bpm-cve-2022-22775
CVE ID: CVE-2022-22776 State: PUBLISHED Published: 2022-05-18T17:00:16.324241Z Last Updated: 2024-09-16T19:05:25.021Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: TIBCO Software Inc. Products: TIBCO BusinessConnect Trading Community Management Problem Types: In the worst case, if the victim is a privileged administrator, successful execution of these vulnerabilities can result in an attacker gaining full administrative access to the affected system. Description: The Web Server component of TIBCO Software Inc.'s TIBCO BusinessConnect Trading Community Management contains easily exploitable vulnerabilities that allows a low privileged attacker with network acce
Community Management contains easily exploitable vulnerabilities that allows a low privileged attacker with network access to execute Stored Cross Site Scripting (XSS) on the affected system. A successful attack using these vulnerabilities requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO BusinessConnect Trading Community Management: versions 6.1.0 and below. Additional Analyst Notes: - CVE Program Container: References: - https://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2022/05/tibco-security-advisory-may-18-2022-tibco-bctcm-cve-2022-22776
CVE ID: CVE-2022-22777 State: PUBLISHED Published: 2022-05-18T17:00:17.717698Z Last Updated: 2024-09-16T16:49:14.776Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: TIBCO Software Inc. Products: TIBCO BusinessConnect Trading Community Management Problem Types: Successful execution of this vulnerability can result in an attacker gaining partial access to the affected system and can result in unauthorized read, update, insert or delete access to a subset of resources. Description: The Web Server component of TIBCO Software Inc.'s TIBCO BusinessConnect Trading Community Management contains easily exploitable Reflected Cross Site Scripting (XSS) vulnerabilities
essConnect Trading Community Management contains easily exploitable Reflected Cross Site Scripting (XSS) vulnerabilities that allow an unauthenticated attacker with network access to execute scripts targeting the affected system or the victim's local system. Affected releases are TIBCO Software Inc.'s TIBCO BusinessConnect Trading Community Management: versions 6.1.0 and below. Additional Analyst Notes: - CVE Program Container: References: - https://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2022/05/tibco-security-advisory-may-18-2022-tibco-bctcm-cve-2022-22777
CVE ID: CVE-2022-22778 State: PUBLISHED Published: 2022-05-18T17:00:19.096976Z Last Updated: 2024-09-16T18:24:03.196Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: TIBCO Software Inc. Products: TIBCO BusinessConnect Trading Community Management Problem Types: In the worst case, if the victim is a privileged administrator, successful execution of these vulnerabilities can result in an attacker gaining full administrative access to the affected system. Description: The Web Server component of TIBCO Software Inc.'s TIBCO BusinessConnect Trading Community Management contains an easily exploitable vulnerability that allows an unauthenticated attacker with network
g Community Management contains an easily exploitable vulnerability that allows an unauthenticated attacker with network access to execute Cross-Site Request Forgery (CSRF) on the affected system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO BusinessConnect Trading Community Management: versions 6.1.0 and below. Additional Analyst Notes: - CVE Program Container: References: - https://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2022/05/tibco-security-advisory-may-18-2022-tibco-bctcm-cve-2022-22778
CVE ID: CVE-2022-22779 State: PUBLISHED Published: 2022-02-09T22:05:15.143232Z Last Updated: 2024-09-17T00:05:46.594Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Zoom Video Communications Inc Products: Keybase Client for macOS, Keybase Client for Windows Problem Types: Improper Enforcement of Behavioral Workflow Description: The Keybase Clients for macOS and Windows before version 5.9.0 fails to properly remove exploded messages initiated by a user. This can occur if the receiving user switches to a non-chat feature and places the host in a sleep state before the sending user explodes the messages. This could lead to disclosure of sensitive information whic
a sleep state before the sending user explodes the messages. This could lead to disclosure of sensitive information which was meant to be deleted from a user’s filesystem. Additional Analyst Notes: - CVE Program Container: References: - https://explore.zoom.us/en/trust/security/security-bulletin