The server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains a vulnerability that allows an attacker with low-privileged application  access to read system files that are accessible to the web server. Affected releases are TIBCO Software Inc.'s TIBCO EBX Add-ons: versions 4.5.16 and below.
                
            References
                    | Link | Resource | 
|---|---|
| https://www.tibco.com/services/support/advisories | Vendor Advisory | 
| https://www.tibco.com/services/support/advisories | Vendor Advisory | 
Configurations
                    History
                    16 Jan 2025, 19:15
| Type | Values Removed | Values Added | 
|---|---|---|
| CWE | CWE-203 | 
21 Nov 2024, 07:50
| Type | Values Removed | Values Added | 
|---|---|---|
| References | () https://www.tibco.com/services/support/advisories - Vendor Advisory | |
| CVSS | 
        v2 :  v3 :  | 
    
        v2 : unknown
         v3 : 7.7  | 
01 Jun 2023, 20:34
| Type | Values Removed | Values Added | 
|---|---|---|
| CVSS | 
        v2 :  v3 :  | 
    
        v2 : unknown
         v3 : 6.5  | 
| References | (MISC) https://www.tibco.com/services/support/advisories - Vendor Advisory | |
| CWE | CWE-22 | |
| CPE | cpe:2.3:a:tibco:ebx_add-ons:*:*:*:*:*:*:*:* | 
25 May 2023, 19:15
| Type | Values Removed | Values Added | 
|---|---|---|
| New CVE | 
Information
                Published : 2023-05-25 19:15
Updated : 2025-01-16 19:15
NVD link : CVE-2023-26215
Mitre link : CVE-2023-26215
CVE.ORG link : CVE-2023-26215
JSON object : View
Products Affected
                tibco
- ebx_add-ons
 
