tibco

229 tracked vulnerabilities.

CVE-2019-17336 MEDIUM
TIBCO Spotfire Analytics Platform for AWS Marketplace & Server - In...
Dec 17, 2019
CVSS 6.5
EPSS 0.00
CVE-2019-17335 MEDIUM
TIBCO Spotfire Analytics Platform for AWS and Spotfire Server <= 7.11.7, 7.12.0-10.6.0 - Unauthorized Data Access
Dec 17, 2019
CVSS 6.5
EPSS 0.00
CVE-2019-17334 HIGH
TIBCO Spotfire Analyst < 7.11.1 - Remote Code Execution via DXP File Injection
Dec 17, 2019
CVSS 8.0
EPSS 0.00
CVE-2019-17332 MEDIUM
TIBCO EBX Add-ons <=3.20.13, 4.1.0, 4.2.0-4.2.2 - Stored XSS in Digital Asset Manager
Nov 12, 2019
CVSS 5.4
EPSS 0.00
CVE-2019-17331 MEDIUM
TIBCO EBX Add-ons <= 3.20.13, 4.1.0 - Authenticated Stored Cross-Site Scripting in Data Exchange Web Interface
Nov 12, 2019
CVSS 5.4
EPSS 0.00
CVE-2019-17330 CRITICAL
TIBCO EBX <= 5.8.1.fixR, 5.9.3-5.9.6 - Stored & Reflected XSS
Nov 12, 2019
CVSS 9.6
EPSS 0.00
CVE-2019-11212 MEDIUM
TIBCO Master Data Management < 9.0.1 - Authenticated Cross-Site Scripting
Oct 09, 2019
CVSS 6.3
EPSS 0.00
CVE-2019-11211 CRITICAL
TIBCO Enterprise Runtime for R <1.2.0 & Spotfire AWS 10.4.0-10.5.0 - Authenticated RCE
Sep 18, 2019
CVSS 9.9
EPSS 0.03
CVE-2019-11210 CRITICAL
TIBCO Enterprise Runtime for R - Server Edition <1.2.0 - Auth Bypass
Sep 18, 2019
CVSS 10.0
EPSS 0.03
CVE-2019-11209 HIGH
TIBCO FTL 6.0.0-6.1.0 Access Control Bypass in Realm Configuration
Aug 20, 2019
CVSS 8.8
EPSS 0.01
CVE-2019-11207 HIGH
TIBCO LogLogic Enterprise Virtual Appliance and Log Management Intelligence < 6.2.1 - Cross-Site Request Forgery
Aug 13, 2019
CVSS 8.8
EPSS 0.00
CVE-2019-11208 CRITICAL
TIBCO API Exchange Gateway <2.3.1 - Privilege Escalation
Aug 08, 2019
CVSS 9.9
EPSS 0.00
CVE-2019-3800 MEDIUM
Cloud Foundry Command Line Interface < 6.45.0 - Insufficiently Protected Credentials in Config File
Aug 05, 2019
CVSS 6.3
EPSS 0.00
CVE-2019-11206 MEDIUM
TIBCO Spotfire <10.2.0, <7.11.2, <7.12.0, <7.13.0, <7.14.0, <10.0.0...
May 14, 2019
CVSS 5.3
EPSS 0.00
CVE-2019-11205 HIGH
TIBCO Spotfire Analytics Platform for AWS and Spotfire Server - Reflected Cross-Site Scripting
May 14, 2019
CVSS 8.8
EPSS 0.00
CVE-2019-11204 HIGH
TIBCO Spotfire Statistics Services <7.11.1-10.0.0 - Info Disclosure
May 14, 2019
CVSS 8.8
EPSS 0.00
CVE-2019-8995 MEDIUM
TIBCO ActiveMatrix BPM and Silver Fabric Enabler <= 4.2.0 - Open Redirect via Workspace Client
Apr 24, 2019
CVSS 6.1
EPSS 0.00
CVE-2019-8994 MEDIUM
TIBCO ActiveMatrix BPM <4.2.0 - Privilege Escalation
Apr 24, 2019
CVSS 4.6
EPSS 0.00
CVE-2019-8993 CRITICAL
TIBCO ActiveMatrix BPM <= 4.2.0 - Unauthenticated Credential Disclosure via Administrative Web Server
Apr 24, 2019
CVSS 9.8
EPSS 0.01
CVE-2019-8992 HIGH
TIBCO ActiveMatrix BPM <= 4.2.0 - Unauthenticated Arbitrary Code Upload and Execution via DAA Archive
Apr 24, 2019
CVSS 8.8
EPSS 0.01
CVE-2019-8991 HIGH
TIBCO ActiveMatrix BPM <= 4.2.0 - Cross-Site Request Forgery
Apr 24, 2019
CVSS 8.8
EPSS 0.00
CVE-2019-11203 MEDIUM
TIBCO ActiveMatrix BPM and Silver Fabric Enabler <= 4.2.0 - Cross-Site Request Forgery
Apr 24, 2019
CVSS 6.1
EPSS 0.00
CVE-2019-8990 HIGH
TIBCO ActiveMatrix BusinessWorks <= 6.4.2 - Unauthenticated Request Processing via HTTP Basic Authentication Bypass
Apr 09, 2019
CVSS 8.1
EPSS 0.02
CVE-2019-8989 MEDIUM
TIBCO Data Science for AWS/TIBCO Spotfire Data Science <6.4.0 - Aut...
Mar 26, 2019
CVSS 4.3
EPSS 0.00
CVE-2019-8988 HIGH
TIBCO Data Science for AWS <6.4.0 - Privilege Escalation
Mar 26, 2019
CVSS 8.1
EPSS 0.00
Products
spotfire_server 28 jasperreports_server 22 spotfire_analytics_platform_for_aws 20 rendezvous 16 spotfire_analyst 12 enterprise_message_service 11 jaspersoft 10 jaspersoft_reporting_and_analytics 10 managed_file_transfer_command_center 10 managed_file_transfer_internet_server 10 spotfire_desktop 10 ebx 9 ebx_add-ons 9 ftl 9 runtime_agent 9 activematrix_bpm 8 activematrix_service_bus 8 activematrix_service_grid 8 spotfire_deployment_kit 8 silver_fabric_enabler 7 spotfire_analytics_platform 7 spotfire_statistics_services 7 administrator 6 hawk 6 spotfire_desktop_language_packs 6 activematrix_businessworks_service_engine 5 eftl 5 iprocess_engine 5 jasperreports_library 5 rtworks 5
Quick Filters
Critical CVEs With Exploits In CISA KEV