CVE-2022-30576

HIGH

TIBCO Data Science - Workbench and Statistica < 14.0.1 - Stored Cross-Site Scripting in Web Console

Title source: llm
STIX 2.1

Description

The Web Console component of TIBCO Software Inc.'s TIBCO Data Science - Workbench, TIBCO Statistica, TIBCO Statistica - Estore Edition, and TIBCO Statistica Trial contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute Stored Cross Site Scripting (XSS) on the affected system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO Data Science - Workbench: versions 14.0.0 and below, TIBCO Statistica: versions 14.0.0 and below, TIBCO Statistica - Estore Edition: versions 14.0.0 and below, and TIBCO Statistica Trial: versions 14.0.0 and below.

References (2)

Core 2

Scores

CVSS v3 8.7
EPSS 0.0062
EPSS Percentile 70.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N

Details

CWE
CWE-79
Status published
Products (2)
tibco/data_science_-_workbench < 14.0.1
tibco/statistica < 14.0.1 (3 CPE variants)
Published Aug 16, 2022
Tracked Since Feb 18, 2026