Tibco

229 CVEs across 196 Tibco products. Browse Tibco vulnerabilities, severities, and proof-of-concept exploits.

Tibco products with known CVEs

ProductCVEs
Spotfire Server28
Jasperreports Server22
Spotfire Analytics Platform For AWS20
Rendezvous16
Spotfire Analyst12
Enterprise Message Service11
Jaspersoft10
Jaspersoft Reporting And Analytics10
Managed File Transfer Command Center10
Managed File Transfer Internet Server10
Spotfire Desktop10
Ebx9
Ebx Add-Ons9
Ftl9
Runtime Agent9
Activematrix Bpm8
Activematrix Service Bus8
Activematrix Service Grid8
Spotfire Deployment Kit8
Hawk7
Silver Fabric Enabler7
Spotfire Analytics Platform7
Spotfire Statistics Services7
Administrator6
Spotfire Desktop Language Packs6
Activematrix Businessworks Service Engine5
Eftl5
Iprocess Engine5
Jasperreports Library5
Rtworks5
Slingshot5
Smartsockets Rtserver5
Spotfire Web Player5
Activecatalog4
Businessconnect4
Collaborative Information Manager4
Data Virtualization4
Enterprise Runtime For R4
Messaging Appliance4
Nimbus4
Partnerexpress4
Spotfire Analytics Server4
Spotfire Professional4
Substantiation Es4
Activematrix Businessworks3
Activematrix Policy Director3
Activespaces3
Bpm Enterprise3
Businessconnect Trading Community Management3
Data Science For AWS3
Tibco CVEs — newest first (page 1 of 3)
CVESeverityScorePublishedSummary
CVE-2026-39122026-03-24Injection vulnerabilities due to validation/sanitisation of user-supplied input in ActiveMatrix BusinessWorks and Enterprise Administrator allows information d…
CVE-2026-3207Critical9.82026-03-17Configuration issue in Java Management Extensions (JMX) in TIBCO BPM Enterprise version 4.x allows unauthorised access.
CVE-2025-3115Critical9.82025-04-09Injection Vulnerabilities: Attackers can inject malicious code, potentially gaining control over the system executing these functions. Additionally, insufficie…
CVE-2024-4576Medium5.32024-06-13The component listed above contains a vulnerability that allows an attacker to traverse directories and access sensitive files, leading to unauthorized disclos…
CVE-2024-3182Medium6.52024-05-15Install-type password disclosure vulnerability in Universal Installer including the Silent Installer in TIBCO Hawk versions 6.2.0, 6.2.1, 6.2.2 and 6.2.3 allow…
CVE-2024-3323High8.32024-04-17Cross Site Scripting in UI Request/Response Validation in TIBCO JasperReports Server 8.0.4 and 8.2.0 allows allows for the injection of malicious executabl…
CVE-2023-26222High8.72023-11-14The Web Application component of TIBCO Software Inc.'s TIBCO EBX and TIBCO Product and Service Catalog powered by TIBCO EBX contains an easily exploitable vuln…
CVE-2023-26221Medium5.02023-11-08The Spotfire Connectors component of TIBCO Software Inc.'s Spotfire Analyst, Spotfire Server, and Spotfire for AWS Marketplace contains an easily exploitable v…
CVE-2023-26219High7.42023-10-25The Hawk Console and Hawk Agent components of TIBCO Software Inc.'s TIBCO Hawk, TIBCO Hawk Distribution for TIBCO Silver Fabric, TIBCO Operational Intelligence…
CVE-2023-26220Medium5.42023-10-10The Spotfire Library component of TIBCO Software Inc.'s Spotfire Analyst and Spotfire Server contains an easily exploitable vulnerability that allows a low pri…
CVE-2023-26218High8.02023-09-29The Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains easily exploitable Reflected Cross Site Scripting (XSS) vulnerabilities that allow a lo…
CVE-2023-26217High8.82023-07-19The Data Exchange Add-on component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an easily exploitable vulnerability that allows a low privileged user wi…
CVE-2023-26216Critical9.12023-05-25The server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an exploitable vulnerability that allows an attacker to upload files to a directory ac…
CVE-2023-26215High7.72023-05-25The server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains a vulnerability that allows an attacker with low-privileged application access to rea…
CVE-2023-29268Critical9.82023-04-26The Splus Server component of TIBCO Software Inc.'s TIBCO Spotfire Statistics Services contains a vulnerability that allows an unauthenticated remote attacker…
CVE-2023-26214High7.32023-02-22The BusinessConnect UI component of TIBCO Software Inc.'s TIBCO BusinessConnect contains easily exploitable Reflected Cross Site Scripting (XSS) vulnerabilitie…
CVE-2022-41567High7.32023-02-22The BusinessConnect UI component of TIBCO Software Inc.'s TIBCO BusinessConnect contains an easily exploitable vulnerability that allows a low privileged attac…
CVE-2022-41566High8.72023-02-22The server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an easily exploitable vulnerability that allows a low privileged attacker with network…
CVE-2022-41565High8.72023-02-22The Web Application component of TIBCO Software Inc.'s TIBCO EBX and TIBCO Product and Service Catalog powered by TIBCO EBX contains an easily exploitable vuln…
CVE-2022-41564Medium6.82023-02-14The Hawk Console component of TIBCO Software Inc.'s TIBCO Hawk and TIBCO Operational Intelligence Hawk RedTail contains a vulnerability that will return the EM…
CVE-2022-41563Critical9.02022-12-13The Dashboard component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Developer Edition, TIBCO…
CVE-2022-41562High8.42022-12-13The HTML escaping component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TI…
CVE-2022-41561Critical9.12022-12-13The JNDI Data Sources component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition…
CVE-2022-41560Medium6.52022-12-06The Statement Set Upload via the Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains an easily exploitable vulnerability that allows a low priv…
CVE-2022-41559Critical9.32022-12-06The Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains an easily exploitable vulnerability that allows an unauthenticated attacker with networ…
CVE-2022-41558Critical9.02022-11-15The Visualizations component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analyst, TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform…
CVE-2022-30578High8.02022-09-21The Web Server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an easily exploitable vulnerability that allows a low privileged attacker with net…
CVE-2022-30577High8.02022-09-21The Web Server component of TIBCO Software Inc.'s TIBCO EBX contains an easily exploitable vulnerability that allows a low privileged attacker with network acc…
CVE-2022-30579High7.12022-09-20The Web Player component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains a difficult to explo…
CVE-2022-30576High8.72022-08-16The Web Console component of TIBCO Software Inc.'s TIBCO Data Science - Workbench, TIBCO Statistica, TIBCO Statistica - Estore Edition, and TIBCO Statistica Tr…
CVE-2022-30575High7.32022-08-16The Web Console component of TIBCO Software Inc.'s TIBCO Data Science - Workbench, TIBCO Statistica, TIBCO Statistica - Estore Edition, and TIBCO Statistica Tr…
CVE-2022-30574Medium4.62022-08-09The ftlserver component of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, TIBCO FTL - Enterprise Edition, TIBCO FTL - Ente…
CVE-2022-30573Medium6.72022-08-09The ftlserver component of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, TIBCO FTL - Enterprise Edition, and TIBCO FTL -…
CVE-2022-30572Medium6.52022-08-02The iWay Service Manager Console component of TIBCO Software Inc.'s TIBCO iWay Service Manager contains an easily exploitable Directory Traversal vulnerability…
CVE-2022-30571High8.12022-08-02The iWay Service Manager Console component of TIBCO Software Inc.'s TIBCO iWay Service Manager contains easily exploitable Reflected Cross Site Scripting (XSS)…
CVE-2022-30570Medium6.52022-07-19The Column Based Security component of TIBCO Software Inc.'s TIBCO Data Virtualization and TIBCO Data Virtualization for AWS Marketplace contains an easily exp…
CVE-2022-22778High8.82022-05-18The Web Server component of TIBCO Software Inc.'s TIBCO BusinessConnect Trading Community Management contains an easily exploitable vulnerability that allows a…
CVE-2022-22777Medium6.12022-05-18The Web Server component of TIBCO Software Inc.'s TIBCO BusinessConnect Trading Community Management contains easily exploitable Reflected Cross Site Scripting…
CVE-2022-22776High8.02022-05-18The Web Server component of TIBCO Software Inc.'s TIBCO BusinessConnect Trading Community Management contains easily exploitable vulnerabilities that allows a…
CVE-2022-22775High8.12022-05-17The Workspace client component of TIBCO Software Inc.'s TIBCO BPM Enterprise and TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric contains difficult t…
CVE-2022-22773High7.72022-05-17The REST API component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Develo…
CVE-2022-22774High8.62022-05-10The DOM XML parser and SAX XML parser components of TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center, TIBCO Managed File Transfer Command Cente…
CVE-2022-22772High8.52022-03-30The cfsend, cfrecv, and CyberResp components of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for UNIX and TIBCO Managed File Transfer Plat…
CVE-2022-22771High8.82022-03-15The Server component of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO…
CVE-2022-22770Critical9.82022-02-15The Web Server component of TIBCO Software Inc.'s TIBCO AuditSafe contains an easily exploitable vulnerability that allows an unauthenticated attacker with net…
CVE-2021-43050High8.42022-02-15The Auth Server component of TIBCO Software Inc.'s TIBCO BusinessConnect Container Edition contains an easily exploitable vulnerability that allows an unauthen…
CVE-2021-43049Critical9.82022-02-15The Database component of TIBCO Software Inc.'s TIBCO BusinessConnect Container Edition contains an easily exploitable vulnerability that allows an unauthentic…
CVE-2022-22769High8.02022-01-19The Web server component of TIBCO Software Inc.'s TIBCO EBX, TIBCO EBX, TIBCO EBX, TIBCO EBX Add-ons, TIBCO EBX Add-ons, TIBCO EBX Add-ons, and TIBCO Product a…
CVE-2021-35500Medium6.32022-01-12The Data Virtualization Server component of TIBCO Software Inc.'s TIBCO Data Virtualization, TIBCO Data Virtualization, TIBCO Data Virtualization, and TIBCO Da…
CVE-2021-43055Medium5.92022-01-11The eFTL Server component of TIBCO Software Inc.'s TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, and TIBCO eFTL - Enterprise Edition contains…
CVE-2021-43054High7.12022-01-11The eFTL Server component of TIBCO Software Inc.'s TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, and TIBCO eFTL - Enterprise Edition contains…
CVE-2021-43053High8.52022-01-11The Realm Server component of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, and TIBCO FTL - Enterprise Edition contains a…
CVE-2021-43052Critical9.32022-01-11The Realm Server component of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, and TIBCO FTL - Enterprise Edition contains a…
CVE-2021-43051High7.12021-12-14The Spotfire Server component of TIBCO Software Inc.'s TIBCO Spotfire Server, TIBCO Spotfire Server, and TIBCO Spotfire Server contains a difficult to exploit…
CVE-2021-43048Critical9.82021-11-16The Interior Server and Gateway Server components of TIBCO Software Inc.'s TIBCO PartnerExpress contain a vulnerability that theoretically allows an unauthenti…
CVE-2021-43047Critical9.02021-11-16The Interior Server and Gateway Server components of TIBCO Software Inc.'s TIBCO PartnerExpress contain easily exploitable Stored and Reflected Cross Site Scri…
CVE-2021-43046High7.52021-11-16The Interior Server and Gateway Server components of TIBCO Software Inc.'s TIBCO PartnerExpress contain an easily exploitable vulnerability that allows an unau…
CVE-2021-35499High8.02021-10-26The Web Reporting component of TIBCO Software Inc.'s TIBCO Nimbus contains easily exploitable Stored Cross Site Scripting (XSS) vulnerabilities that allow a lo…
CVE-2021-35498Critical9.82021-10-13The TIBCO EBX Web Server component of TIBCO Software Inc.'s TIBCO EBX, TIBCO EBX, TIBCO EBX, and TIBCO Product and Service Catalog powered by TIBCO EBX contain…
CVE-2021-35496High7.52021-10-12The XMLA Connections component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports…
CVE-2021-35495Critical9.02021-10-12The Scheduler Connection component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperRep…
CVE-2021-35494Medium5.72021-10-12The Rest API component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server…
CVE-2021-35497High7.52021-10-05The FTL Server (tibftlserver) and Docker images containing tibftlserver components of TIBCO Software Inc.'s TIBCO ActiveSpaces - Community Edition, TIBCO Activ…
CVE-2021-35493Critical9.02021-09-14The WebFOCUS Reporting Server and WebFOCUS Client components of TIBCO Software Inc.'s TIBCO WebFOCUS Client, TIBCO WebFOCUS Installer, and TIBCO WebFOCUS Repor…
CVE-2021-28830High8.82021-06-29The TIBCO Spotfire Server and TIBCO Enterprise Runtime for R components of TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enterpr…
CVE-2021-23275High8.82021-06-29The Windows Installation component of TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enterprise Runtime for R - Server Edition, T…
CVE-2021-28829Medium6.52021-04-20The Administration GUI component of TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition, TIBCO Administrat…
CVE-2021-28828High7.62021-04-20The Administration GUI component of TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition, TIBCO Administrat…
CVE-2021-28827Critical9.62021-04-20The Administration GUI component of TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition, TIBCO Administrat…
CVE-2021-28826High8.82021-04-14The Windows Installation component of TIBCO Software Inc.'s TIBCO Messaging - Eclipse Mosquitto Distribution - Bridge - Community Edition and TIBCO Messaging -…
CVE-2021-28825High8.82021-04-14The Windows Installation component of TIBCO Software Inc.'s TIBCO Messaging - Eclipse Mosquitto Distribution - Core - Community Edition and TIBCO Messaging - E…
CVE-2021-28824High8.82021-03-23The Windows Installation component of TIBCO Software Inc.'s TIBCO ActiveSpaces - Community Edition, TIBCO ActiveSpaces - Developer Edition, and TIBCO ActiveSpa…
CVE-2021-28823High8.82021-03-23The Windows Installation component of TIBCO Software Inc.'s TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, and TIBCO eFTL - Enterprise Edition…
CVE-2021-28822High8.82021-03-23The Enterprise Message Service Server (tibemsd), Enterprise Message Service Central Administration (tibemsca), Enterprise Message Service JSON configuration ge…
CVE-2021-28821High8.82021-03-23The Windows Installation component of TIBCO Software Inc.'s TIBCO Enterprise Message Service, TIBCO Enterprise Message Service - Community Edition, and TIBCO E…
CVE-2021-28820High8.82021-03-23The FTL Server (tibftlserver), FTL C API, FTL Golang API, FTL Java API, and FTL .Net API components of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIB…
CVE-2021-28819High8.82021-03-23The Windows Installation component of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, and TIBCO FTL - Enterprise Edition co…
CVE-2021-28818High8.82021-03-23The Rendezvous Routing Daemon (rvrd), Rendezvous Secure Routing Daemon (rvrsd), Rendezvous Secure Daemon (rvsd), Rendezvous Cache (rvcache), Rendezvous Secure…
CVE-2021-28817High8.82021-03-23The Windows Installation component of TIBCO Software Inc.'s TIBCO Rendezvous and TIBCO Rendezvous Developer Edition contains a vulnerability that theoretically…
CVE-2021-23274Critical9.82021-03-23The Config UI component of TIBCO Software Inc.'s TIBCO API Exchange Gateway and TIBCO API Exchange Gateway Distribution for TIBCO Silver Fabric contains a vuln…
CVE-2021-23273High8.02021-03-09The Spotfire client component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Desktop, a…
CVE-2021-23271High8.02021-02-02The TIBCO EBX Web Server component of TIBCO Software Inc.'s TIBCO EBX contains a vulnerability that theoretically allows a low privileged attacker with network…
CVE-2021-23272Medium4.62021-01-26The Application Development Clients component of TIBCO Software Inc.'s TIBCO BPM Enterprise and TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric conta…
CVE-2020-27148High7.12021-01-12The TIBCO EBX Add-on for Oracle Hyperion EPM, TIBCO EBX Data Exchange Add-on, and TIBCO EBX Insight Add-on components of TIBCO Software Inc.'s TIBCO EBX Add-on…
CVE-2020-27147Medium6.52020-12-15The REST API component of TIBCO Software Inc.'s TIBCO PartnerExpress contains a vulnerability that theoretically allows an unauthenticated attacker with networ…
CVE-2020-27146Medium5.02020-11-10The Core component of TIBCO Software Inc.'s TIBCO iProcess Workspace (Browser) contains a vulnerability that theoretically allows an unauthenticated attacker w…
CVE-2020-9417High7.62020-10-20The Transaction Insight reporting component of TIBCO Software Inc.'s TIBCO Foresight Archive and Retrieval System, TIBCO Foresight Archive and Retrieval System…
CVE-2020-9416High8.22020-09-15The Spotfire client component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Desktop, a…
CVE-2020-9415Medium5.32020-08-18The TIBCO Data Virtualization Server component of TIBCO Software Inc.'s TIBCO Data Virtualization and TIBCO Data Virtualization for AWS Marketplace contains a…
CVE-2019-17339Medium6.82020-08-11The VirtualRouter component of TIBCO Software Inc.'s TIBCO Silver Fabric contains a vulnerability that theoretically allows an attacker to inject scripts via U…
CVE-2020-9414High8.82020-06-30The MFT admin service component of TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center and TIBCO Managed File Transfer Internet Server contains a…
CVE-2020-9413Medium6.32020-06-30The MFT Browser file transfer client and MFT Browser admin client components of TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center and TIBCO Mana…
CVE-2020-9412Critical10.02020-06-09The file transfer component of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for IBM i contains a vulnerability that theoretically allows e…
CVE-2020-9411Critical10.02020-06-09The file transfer component of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for IBM i contains a vulnerability that theoretically allows a…
CVE-2020-9410High7.32020-05-20The report generator component of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Serv…
CVE-2020-9409Critical9.82020-05-20The administrative UI component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server for AWS Marketplace, and TIBCO JasperReports Se…
CVE-2020-9408High8.82020-03-11The Spotfire library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains a vulnerabilit…
CVE-2019-17333Medium5.42020-02-19The Web server component of TIBCO Software Inc.'s TIBCO EBX contains a vulnerability that theoretically allows authenticated users to perform stored cross-site…
CVE-2019-17338Medium5.42020-01-28The user interface component of TIBCO Software Inc.'s TIBCO Patterns - Search contains multiple vulnerabilities that theoretically allow authenticated users to…
CVE-2019-17337Medium5.42019-12-17The Spotfire library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains a vulnerabilit…