Security Advisory

CVE-2021-23274

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-03-23 16:55:12

Last updated 2024-09-16 21:58:25

Assigner tibco

CVSS score 9.8

State PUBLISHED

Description

The Config UI component of TIBCO Software Inc.'s TIBCO API Exchange Gateway and TIBCO API Exchange Gateway Distribution for TIBCO Silver Fabric contains a vulnerability that theoretically allows an unauthenticated attacker with network access to execute a clickjacking attack on the affected system. A successful attack using this vulnerability does not require human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO API Exchange Gateway: versions 2.3.3 and below and TIBCO API Exchange Gateway Distribution for TIBCO Silver Fabric: versions 2.3.3 and below.

← Browse all CVEs View on cve.org ↗