CVE-2023-26214 (published 2023-02-22T00:00:00)
The BusinessConnect UI component of TIBCO Software Inc.'s TIBCO BusinessConnect contains easily exploitable Reflected Cross Site Scripting (XSS) vulnerabilities that allow a low privileged attacker with network access to execute scripts targeting the affected system or the victim's local system. Affected releases are TIBCO Software Inc.'s TIBCO BusinessConnect: versions 7.3.0 and below.
Affected products: Vendor: TIBCO Software Inc.
Product: TIBCO BusinessConnect
Versions: unspecified