Skip to content
CVE Tracker
Back

CVE-2017-5536

TIBCO DataSynapse GridServer manager component vulnerable to cross-site scripting attacks

Medium6.3EPSS 0.66%
Published
Updated
Reserved
Assigned by
tibco

Description

The GridServer Broker, and GridServer Director components of TIBCO Software Inc. TIBCO DataSynapse GridServer Manager contain vulnerabilities which may allow an authenticated user to perform cross-site scripting (XSS). In addition, an authenticated user could be a victim of a cross-site request forgery (CSRF) attack. Affected releases include TIBCO Software Inc.'s TIBCO DataSynapse GridServer Manager: versions up to and including 5.1.3; 6.0.0; 6.0.1; 6.0.2; 6.1.0; 6.1.1; and 6.2.0.

Scores

CVSS scores of CVE-2017-5536, by who scored it
Scored byCVSSScoreVector
tibcoCNA (assigner)3.0Medium6.3CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N
NVDNVD · Modified3.0Medium5.4CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS (exploitation in 30 days)
0.66% · top 48% of all CVEs (3 Nov 2026)

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.3.

Weakness

  • The impact of this vulnerability includes the possibility that a malicious actor could gain access to a more privileged account on the affected components or the information managed by those components.
  • CWE-79 (opens in a new tab)Other CVEs with CWE-79

Affected products

  • TIBCO Software Inc. · TIBCO DataSynapse GridServer Manager

    • affected unspecified – ≤ 5.1.3
    • affected 6.0.0
    • affected 6.0.1
    • affected 6.0.2
    • affected 6.1.0
    • affected 6.1.1
    • affected 6.2.0

What to do

Solution: TIBCO has released updated versions of the affected components which address these issues. For each affected system, update to the corresponding software versions: TIBCO DataSynapse GridServer Manager versions 5.1.3 and below update to version 5.2.0 or higher TIBCO DataSynapse GridServer Manager versions 6.0.0, 6.0.1, and 6.0.2 update to version 6.3.0 or higher TIBCO DataSynapse GridServer Manager versions 6.1.0, and 6.1.1 update to version 6.3.0 or higher TIBCO DataSynapse GridServer Manager version 6.2.0 update to version 6.3.0 or higher

References (1)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2017-5536 badge
[![CVE-2017-5536](https://trackcve.app/badge/CVE-2017-5536.svg)](https://trackcve.app/cve/CVE-2017-5536)

Record last updated .