CVE-2019-17332: TIBCO EBX Add-on For Digital Asset Manager Cross-Site Scripting Vulnerabilities

Security readout for executives and security teams

TIBCO EBX Add-ons Digital Asset Manager has a stored XSS flaw. An authenticated user could save malicious content that later affects another user in the web interface. Because successful abuse could expose or alter sensitive data, organizations using affected EBX Add-ons should treat this as a high-priority enterprise application issue. Exposure is limited to environments running the affected TIBCO EBX Add-ons with the Digital Asset Manager Web Interface enabled. Risk is higher where many authenticated users can create or edit digital asset content viewed by privileged users. Prioritize remediation where EBX manages sensitive business, reference, or master data. The flaw requires authentication, but stored XSS can turn a lower-privileged user into a risk to privileged users and data integrity. Mitigation focus: Inventory TIBCO EBX Add-ons versions and identify Digital Asset Manager deployments.; Check TIBCO’s advisory and support guidance for fixed versions or vendor-approved mitigations.; Restrict Digital Asset Manager access to trusted users until remediation is complete..

Prepared

May 24, 2026, 09:54 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.