What’s Vulnerable › Vulnerabilities
CVE-2022-41559: TIBCO Nimbus Open Redirect Vulnerability
- Severity: critical (CVSS 9.3 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.7% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2022-12-06 · updated 2026-06-17
- Weakness: CWE-601
Description
The Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains an easily exploitable vulnerability that allows an unauthenticated attacker with network access to exploit an open redirect on the affected system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO Nimbus: version 10.5.0.
Affected products
- TIBCO Software Inc. TIBCO Nimbus: 10.5.0
References
Get alerted when CVE-2022-41559 or the next vulnerability affects your stack