Security Advisory
CVE-2022-30571
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
The iWay Service Manager Console component of TIBCO Software Inc.s TIBCO iWay Service Manager contains easily exploitable Reflected Cross Site Scripting (XSS) vulnerabilities that allow a low privileged attacker with network access to execute scripts targeting the affected system or the victims local system. Affected releases are TIBCO Software Inc.s TIBCO iWay Service Manager: versions 8.0.6 and below.