Browse CVEs

CRITICAL 9.3 CVE-2022-41559 The Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains an easily exploitable vulnerability that allows an unauthenticated attacker w… Nimbus Mitigation only Fix from $2,3002022-12-06 MEDIUM 6.5 CVE-2022-41560 The Statement Set Upload via the Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains an easily exploitable vulnerability that allows … Nimbus Mitigation only Fix from $1,6002022-12-06 HIGH 8.4 CVE-2022-30579 The Web Player component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains a difficul… Spotfire Analytics Platform Mitigation only Fix from $1,9502022-09-20 HIGH 8.8 CVE-2022-22771 The Server component of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Serv… Jasperreports Library Mitigation only Fix from $1,9502022-03-15 HIGH 7.5 CVE-2021-35497 The FTL Server (tibftlserver) and Docker images containing tibftlserver components of TIBCO Software Inc.'s TIBCO ActiveSpaces - Community Edition, T… Activespaces Mitigation only Fix from $1,9502021-10-05 MEDIUM 6.5 CVE-2020-27147 The REST API component of TIBCO Software Inc.'s TIBCO PartnerExpress contains a vulnerability that theoretically allows an unauthenticated attacker w… Partnerexpress Mitigation only Fix from $1,6002020-12-15 MEDIUM 5.4 CVE-2020-9416 The Spotfire client component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire … Spotfire Analyst Mitigation only Fix from $1,6002020-09-15 HIGH 8.8 CVE-2019-11209 The realm configuration component of TIBCO Software Inc.'s TIBCO FTL Community Edition, TIBCO FTL Developer Edition, TIBCO FTL Enterprise Edition con… Ftl Mitigation only Fix from $1,9502019-08-20 MEDIUM 6.1 CVE-2019-11205 The web server component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains vulnerabi… Spotfire Analytics Platform For Aws Mitigation only Fix from $1,6002019-05-14 HIGH 8.8 CVE-2018-12411 The administrative daemon (tibdgadmind) of TIBCO Software Inc.'s TIBCO ActiveSpaces - Community Edition, TIBCO ActiveSpaces - Developer Edition, and … Activespaces Mitigation only Fix from $1,9502018-11-06 HIGH 8.8 CVE-2018-12413 The Schema repository server (tibschemad) component of TIBCO Software Inc.'s TIBCO Messaging - Apache Kafka Distribution - Schema Repository - Commun… Messaging Apache Kafka Distribution Schema Repository Mitigation only Fix from $1,9502018-11-06 CRITICAL 9.8 CVE-2017-3181 Multiple TIBCO Products are prone to multiple unspecified SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input bef… Spotfire Analyst Mitigation only Fix from $2,3002018-07-24 HIGH 8.8 CVE-2018-5428 The version control adapters component of TIBCO Data Virtualization (formerly known as Cisco Information Server) contains vulnerabilities that may al… Data Virtualization Mitigation only Fix from $1,9502018-06-20 CRITICAL 9.8 CVE-2017-5533 A vulnerability in the server content cache of TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server f… Jasperreports Server Mitigation only Fix from $2,3002017-11-15 HIGH 8.8 CVE-2017-5531 Deployments of TIBCO Managed File Transfer Command Center versions 8.0.0 and 8.0.1 and TIBCO Managed File Transfer Internet Server versions 8.0.0 and… Managed File Transfer Command Center Mitigation only Fix from $1,9502017-10-17 MEDIUM 6.4 CVE-2014-5286 The ActiveMatrix Policy Manager Authentication module in TIBCO ActiveMatrix Policy Agent 3.x before 3.1.2, ActiveMatrix Policy Manager 3.x before 3.1… Activematrix Management Agent Mitigation only Fix from $1,6002015-02-19 HIGH 10.0 CVE-2014-2075 TIBCO Enterprise Administrator 1.0.0 and Enterprise Administrator SDK 1.0.0 do not properly enforce administrative authentication requirements, which… Enterprise Administrator Mitigation only Fix from $1,9502014-02-27 MEDIUM 6.5 CVE-2013-3315 The server in TIBCO Silver Mobile 1.1.0 does not properly verify access to the administrator role before executing a command, which allows authentica… Silver Mobile Mitigation only Fix from $1,6002013-05-31 MEDIUM 6.4 CVE-2013-2373 The Engine in TIBCO Spotfire Web Player 3.3.x before 3.3.3, 4.0.x before 4.0.3, 4.5.x before 4.5.1, and 5.0.x before 5.0.1 does not properly implemen… Spotfire Web Player Mitigation only Fix from $1,6002013-03-15 MEDIUM 5.0 CVE-2013-2371 The Web API in the Statistics Server in TIBCO Spotfire Statistics Services 3.3.x before 3.3.1, 4.5.x before 4.5.1, and 5.0.x before 5.0.1 allows remo… Spotfire Statistics Services Mitigation only Fix from $1,6002013-03-15 HIGH 7.5 CVE-2012-5302 The server in TIBCO Formvine 3.1.x and 3.2.x before 3.2.1 does not properly implement access control, which allows remote attackers to obtain sensiti… Formvine Mitigation only Fix from $1,9502012-10-24 MEDIUM 5.0 CVE-2012-0689 The server in TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3, Service Grid and Service Bus 3.x befor… Activematrix Bpm Mitigation only Fix from $1,6002012-03-13 HIGH 9.0 CVE-2010-4495 Unspecified vulnerability in the ActiveMatrix Runtime component in TIBCO ActiveMatrix Service Grid 3.0.0, 3.0.1, and 3.1.0; ActiveMatrix Service Bus … Activematrix Bpm Mitigation only Fix from $1,9502010-12-17 HIGH 9.3 CVE-2007-5546 Multiple stack-based buffer overflows in TIBCO SmartPGM FX allow remote attackers to execute arbitrary code or cause a denial of service (service sto… Smart Pgm Fx No fix yet Fix from $1,9502007-10-18 HIGH 7.5 CVE-2007-5545 Format string vulnerability in TIBCO SmartPGM FX allows remote attackers to execute arbitrary code via format string specifiers in unspecified vector… Smart Pgm Fx No fix yet Fix from $1,9502007-10-18 HIGH 7.8 CVE-2007-4158 Memory leak in TIBCO Rendezvous (RV) daemon (rvd) 7.5.2, 7.5.3 and 7.5.4 allows remote attackers to cause a denial of service (memory consumption) vi… Rendezvous Mitigation only Fix from $1,9502007-08-03 HIGH 7.8 CVE-2007-4162 TIBCO Rendezvous (RV) 7.5.2 does not protect confidentiality or integrity of inter-daemon communication, which allows remote attackers to capture and… Rendezvous Mitigation only Fix from $1,9502007-08-03 MEDIUM 5.0 CVE-2007-4159 index.html in the HTTP administration interface in certain daemons in TIBCO Rendezvous (RV) 7.5.2 allows remote attackers to obtain sensitive informa… Rendezvous Mitigation only Fix from $1,6002007-08-03 MEDIUM 5.0 CVE-2007-4160 The default configuration of TIBCO Rendezvous (RV) 7.5.2 clients, when -no-multicast is omitted, uses a multicast group as the destination for a netw… Rendezvous No fix yet Fix from $1,6002007-08-03