PatchTheCVEnimbus vulnerabilities and fixes
Recent CVEs affecting nimbus, with upgrade or downgrade steps. 5 tracked.
nimbus has 5 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 3. Most recent: 2023-09-29. Highest priority: CVE-2022-41559 (score 46/100).
- CVE-2023-26218 HIGH 8.0 UPGRADE The Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains easily exploitable Reflected Cross Sit
- CVE-2022-41560 MEDIUM 6.5 DOWNGRADE The Statement Set Upload via the Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains an easily
- CVE-2022-41559 CRITICAL 9.3 DOWNGRADE The Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains an easily exploitable vulnerability th
- CVE-2022-24967 MEDIUM 6.5 UPGRADE Black Rainbow NIMBUS before 3.7.0 allows stored Cross-site Scripting (XSS).
- CVE-2021-35499 HIGH 8.0 UPGRADE The Web Reporting component of TIBCO Software Inc.'s TIBCO Nimbus contains easily exploitable Stored Cross Sit
FAQ
How do I fix nimbus vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is nimbus being exploited right now?
None of the tracked nimbus CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which nimbus CVE should I patch first?
CVE-2022-41559 currently ranks highest (46/100): The Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains an easily exploitable vulnerability th.