{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"state":"PUBLISHED","cveId":"CVE-2022-41559","assignerOrgId":"4f830c72-39e4-45f6-a99f-78cc01ae04db","assignerShortName":"tibco","datePublished":"2022-12-12T01:49:10.008Z","dateUpdated":"2025-04-22T20:14:04.667Z","dateReserved":"2022-09-26T00:00:00.000Z"},"containers":{"cna":{"title":"TIBCO Nimbus Open Redirect Vulnerability","datePublic":"2022-12-06T00:00:00.000Z","providerMetadata":{"orgId":"4f830c72-39e4-45f6-a99f-78cc01ae04db","shortName":"tibco","dateUpdated":"2022-12-06T00:00:00.000Z"},"descriptions":[{"lang":"en","value":"The Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains an easily exploitable vulnerability that allows an unauthenticated attacker with network access to exploit an open redirect on the affected system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO Nimbus: version 10.5.0."}],"affected":[{"vendor":"TIBCO Software Inc.","product":"TIBCO Nimbus","versions":[{"version":"10.5.0","status":"affected"}]}],"references":[{"url":"https://www.tibco.com/services/support/advisories"}],"metrics":[{"cvssV3_1":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":9.3,"baseSeverity":"CRITICAL"}}],"problemTypes":[{"descriptions":[{"type":"text","lang":"en","description":"Successful execution of these vulnerabilities will result in an attacker being able to execute commands with the privileges of the affected user."}]}],"source":{"discovery":""},"solutions":[{"lang":"en","value":"TIBCO has released updated versions of the affected components which address these issues.\n\nTIBCO Nimbus version 10.5.0: update to version 10.5.1 or later"}]},"adp":[{"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-03T12:42:46.254Z"},"title":"CVE Program Container","references":[{"url":"https://www.tibco.com/services/support/advisories","tags":["x_transferred"]}]},{"problemTypes":[{"descriptions":[{"type":"CWE","cweId":"CWE-601","lang":"en","description":"CWE-601 URL Redirection to Untrusted Site ('Open Redirect')"}]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-04-22T20:13:45.728157Z","id":"CVE-2022-41559","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"title":"CISA ADP Vulnrichment","providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-04-22T20:14:04.667Z"}}]}}