CVEvulnerability

CVE-2022-41559

9.3 CRITICAL Published 2022-12-06 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-12-06
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.3 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
CVSS 3.1 ([email protected])
9.3 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
Weaknesses
CWE-601

Description

The Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains an easily exploitable vulnerability that allows an unauthenticated attacker with network access to exploit an open redirect on the affected system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO Nimbus: version 10.5.0.

Affected configurations

• tibco nimbus 10.5.0

Related

Weakness · CWE (1)

  • CWE-601 URL Redirection to Untrusted Site weakness

References