What’s Vulnerable › Vulnerabilities

CVE-2019-17333: TIBCO EBX Exposes Cross-Site Scripting Vulnerability

• Severity: medium (CVSS 5.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-02-19 · updated 2026-06-17
• Weakness: CWE-79

Description

The Web server component of TIBCO Software Inc.'s TIBCO EBX contains a vulnerability that theoretically allows authenticated users to perform stored cross-site scripting (XSS) attacks. Affected releases are TIBCO Software Inc.'s TIBCO EBX: versions 5.8.1.fixS and below, versions 5.9.3, 5.9.4, 5.9.5, 5.9.6, and 5.9.7.

Affected products

• TIBCO Software Inc. TIBCO EBX: before 5.8.1; from 5.9.3 through 5.9.7; 5.8.1, 5.8.1-fixr, 5.8.1-fixs — fixed in 5.8.1

How to fix

Upgrade to a fixed version: TIBCO Software Inc. TIBCO EBX 5.8.1. Check the vendor advisory for mitigations.

References

• http://www.tibco.com/services/support/advisories
• https://www.tibco.com/support/advisories/2020/02/tibco-security-advisory-february-19-2020-tibco-ebx
• http://www.tibco.com/services/support/advisories
• https://www.tibco.com/support/advisories/2020/02/tibco-security-advisory-february-19-2020-tibco-ebx

Get alerted when CVE-2019-17333 or the next vulnerability affects your stack