Critical severity · published Nov 12, 2024
CVE-2024-10217
TIBCO Hawk Stored-XSS Vulnerability
9.2
CVSS
0.5%
EPSS
No
On KEV
Description
XSS Attack in mar.jar, Monitoring Archive Utility (MAR Utility), monitoringconsolecommon.jar in TIBCO Software Inc TIBCO Hawk and TIBCO Operational Intelligence
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 45% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TH
TIBCO Hawk · TIBCO Software Inc
6.2 before 5 · source: vendor
TO
TIBCO Operational Intelligence · TIBCO Software Inc
7.3 before 0 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-10217
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-10217
community.tibco.com
https://community.tibco.com/advisories
More from TIBCO Hawk
9.2
CVE-2024-10218
TIBCO Hawk Stored-XEE Vulnerability
8.8
CVE-2023-26219
TIBCO Operational Intelligence Hawk RedTail Credential Exposure Vulnerability