What is CVE-2022-41559?

CVE-2022-41559 is a critical-severity vulnerability in Tibco Nimbus, classified under URL Redirection to Untrusted Site (Open Redirect). CVSS score: 9.3/10. Published 2022-12-06.

How severe is CVE-2022-41559?

Critical severity. CVSS v3 base score is 9.3 out of 10.

Open Redirect in Tibco Nimbus

CVE-2022-41559

The Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains an easily exploitable vulnerability that allows an unauthenticated attacker with network access to exploit an open redirect on the affected system. A successful attack…

Vulnerability class: Open Redirect

EPSS: 0.007 (46.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.3 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N.

Affected products

Tibco Nimbus — versions 10.5.0
Tibco Software Inc. Nimbus — versions 10.5.0

Weakness classification (CWE)

CWE-601 — URL Redirection to Untrusted Site (Open Redirect)

References

security@tibco.com (Vendor Advisory)

Frequently asked questions

What is CVE-2022-41559?: CVE-2022-41559 is a critical-severity vulnerability in Tibco Nimbus, classified under URL Redirection to Untrusted Site (Open Redirect). CVSS score: 9.3/10. Published 2022-12-06.
How severe is CVE-2022-41559?: Critical severity. CVSS v3 base score is 9.3 out of 10.