Tibco Software Inc.
159 CVEs across 120 Tibco Software Inc. products. Browse Tibco Software Inc. vulnerabilities, severities, and proof-of-concept exploits.
Tibco Software Inc. products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-1138 | High | 8.8 | 2024-03-12 | The FTL Server component of TIBCO Software Inc.'s TIBCO FTL - Enterprise Edition contains a vulnerability that allows a low privileged attacker with network ac… |
CVE-2024-1137 | Medium | 4.3 | 2024-03-12 | The Proxy and Client components of TIBCO Software Inc.'s TIBCO ActiveSpaces - Enterprise Edition contain a vulnerability that theoretically allows an Active Sp… |
CVE-2023-26222 | High | 8.7 | 2023-11-14 | The Web Application component of TIBCO Software Inc.'s TIBCO EBX and TIBCO Product and Service Catalog powered by TIBCO EBX contains an easily exploitable vuln… |
CVE-2023-26221 | Medium | 5.0 | 2023-11-08 | The Spotfire Connectors component of TIBCO Software Inc.'s Spotfire Analyst, Spotfire Server, and Spotfire for AWS Marketplace contains an easily exploitable v… |
CVE-2023-26219 | High | 7.4 | 2023-10-25 | The Hawk Console and Hawk Agent components of TIBCO Software Inc.'s TIBCO Hawk, TIBCO Hawk Distribution for TIBCO Silver Fabric, TIBCO Operational Intelligence… |
CVE-2023-26220 | Medium | 5.4 | 2023-10-10 | The Spotfire Library component of TIBCO Software Inc.'s Spotfire Analyst and Spotfire Server contains an easily exploitable vulnerability that allows a low pri… |
CVE-2023-26218 | High | 8.0 | 2023-09-29 | The Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains easily exploitable Reflected Cross Site Scripting (XSS) vulnerabilities that allow a lo… |
CVE-2023-26217 | High | 8.8 | 2023-07-19 | The Data Exchange Add-on component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an easily exploitable vulnerability that allows a low privileged user wi… |
CVE-2023-26216 | Critical | 9.1 | 2023-05-25 | The server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an exploitable vulnerability that allows an attacker to upload files to a directory ac… |
CVE-2023-26215 | High | 7.7 | 2023-05-25 | The server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains a vulnerability that allows an attacker with low-privileged application access to rea… |
CVE-2023-29268 | Critical | 9.8 | 2023-04-26 | The Splus Server component of TIBCO Software Inc.'s TIBCO Spotfire Statistics Services contains a vulnerability that allows an unauthenticated remote attacker… |
CVE-2023-26214 | High | 7.3 | 2023-02-22 | The BusinessConnect UI component of TIBCO Software Inc.'s TIBCO BusinessConnect contains easily exploitable Reflected Cross Site Scripting (XSS) vulnerabilitie… |
CVE-2022-41567 | High | 7.3 | 2023-02-22 | The BusinessConnect UI component of TIBCO Software Inc.'s TIBCO BusinessConnect contains an easily exploitable vulnerability that allows a low privileged attac… |
CVE-2022-41566 | High | 8.7 | 2023-02-22 | The server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an easily exploitable vulnerability that allows a low privileged attacker with network… |
CVE-2022-41565 | High | 8.7 | 2023-02-22 | The Web Application component of TIBCO Software Inc.'s TIBCO EBX and TIBCO Product and Service Catalog powered by TIBCO EBX contains an easily exploitable vuln… |
CVE-2022-41564 | Medium | 6.8 | 2023-02-14 | The Hawk Console component of TIBCO Software Inc.'s TIBCO Hawk and TIBCO Operational Intelligence Hawk RedTail contains a vulnerability that will return the EM… |
CVE-2022-41563 | Critical | 9.0 | 2022-12-13 | The Dashboard component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Developer Edition, TIBCO… |
CVE-2022-41562 | High | 8.4 | 2022-12-13 | The HTML escaping component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TI… |
CVE-2022-41561 | Critical | 9.1 | 2022-12-13 | The JNDI Data Sources component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition… |
CVE-2022-41560 | Medium | 6.5 | 2022-12-06 | The Statement Set Upload via the Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains an easily exploitable vulnerability that allows a low priv… |
CVE-2022-41559 | Critical | 9.3 | 2022-12-06 | The Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains an easily exploitable vulnerability that allows an unauthenticated attacker with networ… |
CVE-2022-41558 | Critical | 9.0 | 2022-11-15 | The Visualizations component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analyst, TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform… |
CVE-2022-30578 | High | 8.0 | 2022-09-21 | The Web Server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an easily exploitable vulnerability that allows a low privileged attacker with net… |
CVE-2022-30577 | High | 8.0 | 2022-09-21 | The Web Server component of TIBCO Software Inc.'s TIBCO EBX contains an easily exploitable vulnerability that allows a low privileged attacker with network acc… |
CVE-2022-30579 | High | 7.1 | 2022-09-20 | The Web Player component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains a difficult to explo… |
CVE-2022-30576 | High | 8.7 | 2022-08-16 | The Web Console component of TIBCO Software Inc.'s TIBCO Data Science - Workbench, TIBCO Statistica, TIBCO Statistica - Estore Edition, and TIBCO Statistica Tr… |
CVE-2022-30575 | High | 7.3 | 2022-08-16 | The Web Console component of TIBCO Software Inc.'s TIBCO Data Science - Workbench, TIBCO Statistica, TIBCO Statistica - Estore Edition, and TIBCO Statistica Tr… |
CVE-2022-30574 | Medium | 4.6 | 2022-08-09 | The ftlserver component of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, TIBCO FTL - Enterprise Edition, TIBCO FTL - Ente… |
CVE-2022-30573 | Medium | 6.7 | 2022-08-09 | The ftlserver component of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, TIBCO FTL - Enterprise Edition, and TIBCO FTL -… |
CVE-2022-30572 | Medium | 6.5 | 2022-08-02 | The iWay Service Manager Console component of TIBCO Software Inc.'s TIBCO iWay Service Manager contains an easily exploitable Directory Traversal vulnerability… |
CVE-2022-30571 | High | 8.1 | 2022-08-02 | The iWay Service Manager Console component of TIBCO Software Inc.'s TIBCO iWay Service Manager contains easily exploitable Reflected Cross Site Scripting (XSS)… |
CVE-2022-30570 | Medium | 6.5 | 2022-07-19 | The Column Based Security component of TIBCO Software Inc.'s TIBCO Data Virtualization and TIBCO Data Virtualization for AWS Marketplace contains an easily exp… |
CVE-2022-22778 | High | 8.8 | 2022-05-18 | The Web Server component of TIBCO Software Inc.'s TIBCO BusinessConnect Trading Community Management contains an easily exploitable vulnerability that allows a… |
CVE-2022-22777 | Medium | 6.1 | 2022-05-18 | The Web Server component of TIBCO Software Inc.'s TIBCO BusinessConnect Trading Community Management contains easily exploitable Reflected Cross Site Scripting… |
CVE-2022-22776 | High | 8.0 | 2022-05-18 | The Web Server component of TIBCO Software Inc.'s TIBCO BusinessConnect Trading Community Management contains easily exploitable vulnerabilities that allows a… |
CVE-2022-22775 | High | 8.1 | 2022-05-17 | The Workspace client component of TIBCO Software Inc.'s TIBCO BPM Enterprise and TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric contains difficult t… |
CVE-2022-22773 | High | 7.7 | 2022-05-17 | The REST API component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Develo… |
CVE-2022-22774 | High | 8.6 | 2022-05-10 | The DOM XML parser and SAX XML parser components of TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center, TIBCO Managed File Transfer Command Cente… |
CVE-2022-22772 | High | 8.5 | 2022-03-30 | The cfsend, cfrecv, and CyberResp components of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for UNIX and TIBCO Managed File Transfer Plat… |
CVE-2022-22771 | High | 8.8 | 2022-03-15 | The Server component of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO… |
CVE-2022-22770 | Critical | 9.8 | 2022-02-15 | The Web Server component of TIBCO Software Inc.'s TIBCO AuditSafe contains an easily exploitable vulnerability that allows an unauthenticated attacker with net… |
CVE-2021-43050 | High | 8.4 | 2022-02-15 | The Auth Server component of TIBCO Software Inc.'s TIBCO BusinessConnect Container Edition contains an easily exploitable vulnerability that allows an unauthen… |
CVE-2021-43049 | Critical | 9.8 | 2022-02-15 | The Database component of TIBCO Software Inc.'s TIBCO BusinessConnect Container Edition contains an easily exploitable vulnerability that allows an unauthentic… |
CVE-2022-22769 | High | 8.0 | 2022-01-19 | The Web server component of TIBCO Software Inc.'s TIBCO EBX, TIBCO EBX, TIBCO EBX, TIBCO EBX Add-ons, TIBCO EBX Add-ons, TIBCO EBX Add-ons, and TIBCO Product a… |
CVE-2021-35500 | Medium | 6.3 | 2022-01-12 | The Data Virtualization Server component of TIBCO Software Inc.'s TIBCO Data Virtualization, TIBCO Data Virtualization, TIBCO Data Virtualization, and TIBCO Da… |
CVE-2021-43055 | Medium | 5.9 | 2022-01-11 | The eFTL Server component of TIBCO Software Inc.'s TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, and TIBCO eFTL - Enterprise Edition contains… |
CVE-2021-43054 | High | 7.1 | 2022-01-11 | The eFTL Server component of TIBCO Software Inc.'s TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, and TIBCO eFTL - Enterprise Edition contains… |
CVE-2021-43053 | High | 8.5 | 2022-01-11 | The Realm Server component of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, and TIBCO FTL - Enterprise Edition contains a… |
CVE-2021-43052 | Critical | 9.3 | 2022-01-11 | The Realm Server component of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, and TIBCO FTL - Enterprise Edition contains a… |
CVE-2021-43051 | High | 7.1 | 2021-12-14 | The Spotfire Server component of TIBCO Software Inc.'s TIBCO Spotfire Server, TIBCO Spotfire Server, and TIBCO Spotfire Server contains a difficult to exploit… |
CVE-2021-43048 | Critical | 9.8 | 2021-11-16 | The Interior Server and Gateway Server components of TIBCO Software Inc.'s TIBCO PartnerExpress contain a vulnerability that theoretically allows an unauthenti… |
CVE-2021-43047 | Critical | 9.0 | 2021-11-16 | The Interior Server and Gateway Server components of TIBCO Software Inc.'s TIBCO PartnerExpress contain easily exploitable Stored and Reflected Cross Site Scri… |
CVE-2021-43046 | High | 7.5 | 2021-11-16 | The Interior Server and Gateway Server components of TIBCO Software Inc.'s TIBCO PartnerExpress contain an easily exploitable vulnerability that allows an unau… |
CVE-2021-35499 | High | 8.0 | 2021-10-26 | The Web Reporting component of TIBCO Software Inc.'s TIBCO Nimbus contains easily exploitable Stored Cross Site Scripting (XSS) vulnerabilities that allow a lo… |
CVE-2021-35498 | Critical | 9.8 | 2021-10-13 | The TIBCO EBX Web Server component of TIBCO Software Inc.'s TIBCO EBX, TIBCO EBX, TIBCO EBX, and TIBCO Product and Service Catalog powered by TIBCO EBX contain… |
CVE-2021-35496 | High | 7.5 | 2021-10-12 | The XMLA Connections component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports… |
CVE-2021-35495 | Critical | 9.0 | 2021-10-12 | The Scheduler Connection component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperRep… |
CVE-2021-35494 | Medium | 5.7 | 2021-10-12 | The Rest API component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server… |
CVE-2021-35497 | High | 7.5 | 2021-10-05 | The FTL Server (tibftlserver) and Docker images containing tibftlserver components of TIBCO Software Inc.'s TIBCO ActiveSpaces - Community Edition, TIBCO Activ… |
CVE-2021-35493 | Critical | 9.0 | 2021-09-14 | The WebFOCUS Reporting Server and WebFOCUS Client components of TIBCO Software Inc.'s TIBCO WebFOCUS Client, TIBCO WebFOCUS Installer, and TIBCO WebFOCUS Repor… |
CVE-2021-28830 | High | 8.8 | 2021-06-29 | The TIBCO Spotfire Server and TIBCO Enterprise Runtime for R components of TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enterpr… |
CVE-2021-23275 | High | 8.8 | 2021-06-29 | The Windows Installation component of TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enterprise Runtime for R - Server Edition, T… |
CVE-2021-28829 | Medium | 6.5 | 2021-04-20 | The Administration GUI component of TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition, TIBCO Administrat… |
CVE-2021-28828 | High | 7.6 | 2021-04-20 | The Administration GUI component of TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition, TIBCO Administrat… |
CVE-2021-28827 | Critical | 9.6 | 2021-04-20 | The Administration GUI component of TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition, TIBCO Administrat… |
CVE-2021-28826 | High | 8.8 | 2021-04-14 | The Windows Installation component of TIBCO Software Inc.'s TIBCO Messaging - Eclipse Mosquitto Distribution - Bridge - Community Edition and TIBCO Messaging -… |
CVE-2021-28825 | High | 8.8 | 2021-04-14 | The Windows Installation component of TIBCO Software Inc.'s TIBCO Messaging - Eclipse Mosquitto Distribution - Core - Community Edition and TIBCO Messaging - E… |
CVE-2021-28824 | High | 8.8 | 2021-03-23 | The Windows Installation component of TIBCO Software Inc.'s TIBCO ActiveSpaces - Community Edition, TIBCO ActiveSpaces - Developer Edition, and TIBCO ActiveSpa… |
CVE-2021-28823 | High | 8.8 | 2021-03-23 | The Windows Installation component of TIBCO Software Inc.'s TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, and TIBCO eFTL - Enterprise Edition… |
CVE-2021-28822 | High | 8.8 | 2021-03-23 | The Enterprise Message Service Server (tibemsd), Enterprise Message Service Central Administration (tibemsca), Enterprise Message Service JSON configuration ge… |
CVE-2021-28821 | High | 8.8 | 2021-03-23 | The Windows Installation component of TIBCO Software Inc.'s TIBCO Enterprise Message Service, TIBCO Enterprise Message Service - Community Edition, and TIBCO E… |
CVE-2021-28820 | High | 8.8 | 2021-03-23 | The FTL Server (tibftlserver), FTL C API, FTL Golang API, FTL Java API, and FTL .Net API components of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIB… |
CVE-2021-28819 | High | 8.8 | 2021-03-23 | The Windows Installation component of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, and TIBCO FTL - Enterprise Edition co… |
CVE-2021-28818 | High | 8.8 | 2021-03-23 | The Rendezvous Routing Daemon (rvrd), Rendezvous Secure Routing Daemon (rvrsd), Rendezvous Secure Daemon (rvsd), Rendezvous Cache (rvcache), Rendezvous Secure… |
CVE-2021-28817 | High | 8.8 | 2021-03-23 | The Windows Installation component of TIBCO Software Inc.'s TIBCO Rendezvous and TIBCO Rendezvous Developer Edition contains a vulnerability that theoretically… |
CVE-2021-23274 | Critical | 9.8 | 2021-03-23 | The Config UI component of TIBCO Software Inc.'s TIBCO API Exchange Gateway and TIBCO API Exchange Gateway Distribution for TIBCO Silver Fabric contains a vuln… |
CVE-2021-23273 | High | 8.0 | 2021-03-09 | The Spotfire client component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Desktop, a… |
CVE-2021-23271 | High | 8.0 | 2021-02-02 | The TIBCO EBX Web Server component of TIBCO Software Inc.'s TIBCO EBX contains a vulnerability that theoretically allows a low privileged attacker with network… |
CVE-2021-23272 | Medium | 4.6 | 2021-01-26 | The Application Development Clients component of TIBCO Software Inc.'s TIBCO BPM Enterprise and TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric conta… |
CVE-2020-27148 | High | 7.1 | 2021-01-12 | The TIBCO EBX Add-on for Oracle Hyperion EPM, TIBCO EBX Data Exchange Add-on, and TIBCO EBX Insight Add-on components of TIBCO Software Inc.'s TIBCO EBX Add-on… |
CVE-2020-27147 | Medium | 6.5 | 2020-12-15 | The REST API component of TIBCO Software Inc.'s TIBCO PartnerExpress contains a vulnerability that theoretically allows an unauthenticated attacker with networ… |
CVE-2020-27146 | Medium | 5.0 | 2020-11-10 | The Core component of TIBCO Software Inc.'s TIBCO iProcess Workspace (Browser) contains a vulnerability that theoretically allows an unauthenticated attacker w… |
CVE-2020-9417 | High | 7.6 | 2020-10-20 | The Transaction Insight reporting component of TIBCO Software Inc.'s TIBCO Foresight Archive and Retrieval System, TIBCO Foresight Archive and Retrieval System… |
CVE-2020-9416 | High | 8.2 | 2020-09-15 | The Spotfire client component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Desktop, a… |
CVE-2020-9415 | Medium | 5.3 | 2020-08-18 | The TIBCO Data Virtualization Server component of TIBCO Software Inc.'s TIBCO Data Virtualization and TIBCO Data Virtualization for AWS Marketplace contains a… |
CVE-2019-17339 | Medium | 6.8 | 2020-08-11 | The VirtualRouter component of TIBCO Software Inc.'s TIBCO Silver Fabric contains a vulnerability that theoretically allows an attacker to inject scripts via U… |
CVE-2020-9414 | High | 8.8 | 2020-06-30 | The MFT admin service component of TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center and TIBCO Managed File Transfer Internet Server contains a… |
CVE-2020-9413 | Medium | 6.3 | 2020-06-30 | The MFT Browser file transfer client and MFT Browser admin client components of TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center and TIBCO Mana… |
CVE-2020-9412 | Critical | 10.0 | 2020-06-09 | The file transfer component of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for IBM i contains a vulnerability that theoretically allows e… |
CVE-2020-9411 | Critical | 10.0 | 2020-06-09 | The file transfer component of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for IBM i contains a vulnerability that theoretically allows a… |
CVE-2020-9410 | High | 7.3 | 2020-05-20 | The report generator component of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Serv… |
CVE-2020-9409 | Critical | 9.8 | 2020-05-20 | The administrative UI component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server for AWS Marketplace, and TIBCO JasperReports Se… |
CVE-2020-9408 | High | 8.8 | 2020-03-11 | The Spotfire library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains a vulnerabilit… |
CVE-2019-17333 | Medium | 5.4 | 2020-02-19 | The Web server component of TIBCO Software Inc.'s TIBCO EBX contains a vulnerability that theoretically allows authenticated users to perform stored cross-site… |
CVE-2019-17338 | Medium | 5.4 | 2020-01-28 | The user interface component of TIBCO Software Inc.'s TIBCO Patterns - Search contains multiple vulnerabilities that theoretically allow authenticated users to… |
CVE-2019-17337 | Medium | 5.4 | 2019-12-17 | The Spotfire library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains a vulnerabilit… |
CVE-2019-17336 | Medium | 6.5 | 2019-12-17 | The Data access layer component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains multiple vuln… |
CVE-2019-17335 | Medium | 6.5 | 2019-12-17 | The Data access layer component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains multiple vuln… |
CVE-2019-17334 | High | 8.0 | 2019-12-17 | The Visualizations component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Deployment… |
CVE-2019-17332 | Medium | 5.4 | 2019-11-12 | The Digital Asset Manager Web Interface component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains a vulnerability that theoretically allows authenticated u… |