CVE-2022-41560 MEDIUM

CVE-2022-41560: TIBCO Nimbus Denial of Service Vulnerability

Vendor Tibco Software Inc.
Product TIBCO Nimbus
Published December 12, 2022
Last update April 22, 2025
View on NVD All CVEs

CVSS base score

6.5/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

The Statement Set Upload via the Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute a Denial of Service Attack on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO Nimbus: version 10.5.0.

Key dates

02Disclosure timeline

December 12, 2022 CVE published
April 22, 2025 Record updated