Browse CVEs

HIGH 8.8 CVE-2018-5430 KEVEPSS 50% The Spring web flows of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server fo… Jasperreports Server after 6.4.2 Fix from $1,9502018-04-17 MEDIUM 5.4 CVE-2018-5431 The domain designer component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports … Jasperreports Server after 6.4.2 Fix from $1,6002018-04-17 HIGH 8.8 CVE-2017-5534 The tibbr user profiles components of tibbr Community, and tibbr Enterprise expose a weakness in an improperly sandboxed third-party component. Affec… Tibbr after 5.2.1 Fix from $1,9502017-12-13 HIGH 8.1 CVE-2017-5530 The tibbr web server components of tibbr Community, and tibbr Enterprise contain SAML protocol handling errors which may allow authorized users to im… Tibbr after 5.2.1 Fix from $1,9502017-12-13 CRITICAL 9.8 CVE-2017-5533 A vulnerability in the server content cache of TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server f… Jasperreports Server Mitigation only Fix from $2,3002017-11-15 MEDIUM 5.4 CVE-2017-5532 A vulnerability in the report renderer component of TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Ser… Jasperreports Server after 6.4.1 Fix from $1,6002017-11-15 HIGH 8.8 CVE-2017-5531 Deployments of TIBCO Managed File Transfer Command Center versions 8.0.0 and 8.0.1 and TIBCO Managed File Transfer Internet Server versions 8.0.0 and… Managed File Transfer Command Center Mitigation only Fix from $1,9502017-10-17 HIGH 8.8 CVE-2017-5528 Multiple JasperReports Server components contain vulnerabilities which may allow authorized users to perform cross-site scripting (XSS) and cross-sit… Jasperreports Server after 6.3.0 Fix from $1,9502017-06-29 MEDIUM 6.5 CVE-2017-5529 JasperReports library components contain an information disclosure vulnerability. This vulnerability includes the theoretical disclosure of any acces… Jasperreports Library Community Edition after 6.4.0 Fix from $1,6002017-06-29 MEDIUM 6.5 CVE-2017-5527 TIBCO Spotfire Server 7.0.X before 7.0.2, 7.5.x before 7.5.1, 7.6.x before 7.6.1, 7.7.x before 7.7.1, and 7.8.x before 7.8.1 and Spotfire Analytics P… Spotfire Analytics Platform For Aws after 7.8.0 Fix from $1,6002017-05-09 HIGH 8.8 CVE-2016-3628 Buffer overflow in tibemsd in the server in TIBCO Enterprise Message Service (EMS) before 8.3.0 and EMS Appliance before 2.4.0 allows remote authenti… Enterprise Message Service Appliance Firmware after 8.2.2 Fix from $1,9502016-04-20 MEDIUM 5.0 CVE-2015-5713 Spotfire Parsing Library and Spotfire Security Filter in TIBCO Spotfire Server 5.5.x before 5.5.4, 6.0.x before 6.0.5, 6.5.x before 6.5.4, and 7.0.x … Spotfire Server after 7.0.1 Fix from $1,6002015-10-28 HIGH 7.5 CVE-2015-4555 Buffer overflow in the HTTP administrative interface in TIBCO Rendezvous before 8.4.4, Rendezvous Network Server before 1.1.1, Substation ES before 2… Messaging Appliance after 8.7.1 Fix from $1,9502015-08-30 HIGH 7.5 CVE-2015-4554 Multiple unspecified vulnerabilities in TIBCO Spotfire Client and Spotfire Web Player Client in Spotfire Analyst before 5.5.2, 6.0.x before 6.0.3, 6.… Spotfire Deployment Kit after 6.5.1 Fix from $1,9502015-07-21 MEDIUM 6.4 CVE-2014-5286 The ActiveMatrix Policy Manager Authentication module in TIBCO ActiveMatrix Policy Agent 3.x before 3.1.2, ActiveMatrix Policy Manager 3.x before 3.1… Activematrix Management Agent Mitigation only Fix from $1,6002015-02-19 MEDIUM 6.4 CVE-2014-7194 TIBCO Managed File Transfer Internet Server before 7.2.4, Managed File Transfer Command Center before 7.2.4, Slingshot before 1.9.3, and Vault before… Managed File Transfer Internet Server after 7.2.3 Fix from $1,6002014-11-21 HIGH 7.5 CVE-2014-5285 Unspecified vulnerability in the Authentication Module in TIBCO Spotfire Server before 4.5.2, 5.0.x before 5.0.3, 5.5.x before 5.5.2, 6.0.x before 6.… Spotfire Server after 4.5.1 Fix from $1,9502014-09-04 MEDIUM 5.0 CVE-2014-2545 TIBCO Managed File Transfer Internet Server before 7.2.2, Managed File Transfer Command Center before 7.2.2, Slingshot before 1.9.1, and Vault before… Slingshot after 7.2.1 Fix from $1,6002014-04-30 HIGH 7.5 CVE-2014-2544 Unspecified vulnerability in Spotfire Web Player Engine, Spotfire Desktop, and Spotfire Server Authentication Module in TIBCO Spotfire Server 3.3.x b… Web Player after 6.0.0 Fix from $1,9502014-04-10 HIGH 7.5 CVE-2014-2543 Buffer overflow in the Rendezvous Daemon (rvd), Rendezvous Routing Daemon (rvrd), Rendezvous Secure Daemon (rvsd), and Rendezvous Secure Routing Daem… Rendezvous after 8.7.0 Fix from $1,9502014-04-08 MEDIUM 5.0 CVE-2014-2541 The Rendezvous Daemon (rvd), Rendezvous Routing Daemon (rvrd), Rendezvous Secure Daemon (rvsd), and Rendezvous Secure Routing Daemon (rvsrd) in TIBCO… Rendezvous after 8.7.0 Fix from $1,6002014-04-08 HIGH 10.0 CVE-2014-2075 TIBCO Enterprise Administrator 1.0.0 and Enterprise Administrator SDK 1.0.0 do not properly enforce administrative authentication requirements, which… Enterprise Administrator Mitigation only Fix from $1,9502014-02-27 MEDIUM 6.5 CVE-2013-3315 The server in TIBCO Silver Mobile 1.1.0 does not properly verify access to the administrator role before executing a command, which allows authentica… Silver Mobile Mitigation only Fix from $1,6002013-05-31 MEDIUM 6.4 CVE-2013-2373 The Engine in TIBCO Spotfire Web Player 3.3.x before 3.3.3, 4.0.x before 4.0.3, 4.5.x before 4.5.1, and 5.0.x before 5.0.1 does not properly implemen… Spotfire Web Player Mitigation only Fix from $1,6002013-03-15 MEDIUM 5.0 CVE-2013-2371 The Web API in the Statistics Server in TIBCO Spotfire Statistics Services 3.3.x before 3.3.1, 4.5.x before 4.5.1, and 5.0.x before 5.0.1 allows remo… Spotfire Statistics Services Mitigation only Fix from $1,6002013-03-15 HIGH 7.5 CVE-2012-5302 The server in TIBCO Formvine 3.1.x and 3.2.x before 3.2.1 does not properly implement access control, which allows remote attackers to obtain sensiti… Formvine Mitigation only Fix from $1,9502012-10-24 MEDIUM 5.0 CVE-2012-0687 TIBCO ActiveMatrix Runtime Platform in Service Grid and Service Bus 2.x before 2.3.2 and BusinessWorks Service Engine before 5.8.2; TIBCO ActiveMatri… Activematrix Service Bus after 5.9.2 Fix from $1,6002012-03-13 MEDIUM 5.0 CVE-2012-0689 The server in TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3, Service Grid and Service Bus 3.x befor… Activematrix Bpm Mitigation only Fix from $1,6002012-03-13 MEDIUM 5.0 CVE-2012-0690 TIBCO Spotfire Web Application, Web Player Application, Automation Services Application, and Analytics Client Application in Spotfire Analytics Serve… Spotfire Analytics Server after 4.0.1 Fix from $1,6002012-03-13 HIGH 7.5 CVE-2011-3134 Unspecified vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.1, and Spotfire A… Spotfire Analytics Server after 10.0.1 Fix from $1,9502011-09-02