Vulnerability Details : CVE-2022-41559
The Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains an easily exploitable vulnerability that allows an unauthenticated attacker with network access to exploit an open redirect on the affected system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO Nimbus: version 10.5.0.
Vulnerability category: Open redirect
Products affected by CVE-2022-41559
- cpe:2.3:a:tibco:nimbus:10.5.0:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2022-41559
0.15%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 51 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2022-41559
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
9.3
|
CRITICAL | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N |
2.8
|
5.8
|
NIST | |
9.3
|
CRITICAL | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N |
2.8
|
5.8
|
TIBCO Software Inc. |
CWE ids for CVE-2022-41559
-
A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect. This simplifies phishing attacks.Assigned by: nvd@nist.gov (Primary)
References for CVE-2022-41559
-
https://www.tibco.com/services/support/advisories
Advisory | TIBCO SoftwareVendor Advisory
Jump to