TIBCO

Records236All Threatist records

Exploited (KEV)2In CISA KEV

CVSS critical52CVSS 9.0–10.0

CVSS high109CVSS 7.0–8.9

Exploited now

TIBCO records in CISA KEV

TI-2018-13320 TIBCO JasperReports Library Directory Traversal Vulnerability CRITICAL 88KEV 2022-12-29 TI-2018-03944 TIBCO JasperReports Server Information Disclosure Vulnerability CRITICAL 95KEV 2022-12-29

Components

Products in the NVD configurations · select one to filter the records

Spotfire Server 28 records MEDIUM Jasperreports Server 22 records CRITICAL Spotfire Analytics Platform For Aws 20 records MEDIUM Rendezvous 16 records MEDIUM Spotfire Analyst 12 records MEDIUM Enterprise Message Service 11 records MEDIUM Jaspersoft 10 records CRITICAL Jaspersoft Reporting And Analytics 10 records CRITICAL

Records

9 records in Ebx · all components

TI-2021-14236 CVE-2021-35498 · GHSA-9v4m-78rp-fgv2

TIBCO EBX Insecure Login Mechanism

MEDIUM 45

The TIBCO EBX Web Server component of TIBCO Software Inc.'s TIBCO EBX, TIBCO EBX, TIBCO EBX, and TIBCO Product and Service Catalog powered by TIBCO EBX contains a vulnerability that under certain specific conditions allo…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01313 Published 2021-10-13 No fix listed CWE-521

TI-2019-12928 CVE-2019-17330 · GHSA-p9cc-vhfp-h269

TIBCO EBX Exposes Multiple Cross-Site Scripting Vulnerabilities

MEDIUM 43

The Web server component of TIBCO Software Inc.'s TIBCO EBX contains multiple vulnerabilities that theoretically allow authenticated users to perform stored cross-site scripting (XSS) attacks, and unauthenticated users t…

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00968 Published 2019-11-12 No fix listed CWE-79

TI-2022-12723 CVE-2022-30577 · GHSA-3qhw-7jqw-3rwp

TIBCO EBX Stored XSS vulnerability

MEDIUM 40

The Web Server component of TIBCO Software Inc.'s TIBCO EBX contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute Stored Cross Site Scripting (XSS) on the affec…

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00856 Published 2022-09-21 No fix listed CWE-79

TI-2022-07018 CVE-2022-22769 · GHSA-v9xg-xqj3-g2w8

TIBCO EBX vulnerabilities

MEDIUM 40

The Web server component of TIBCO Software Inc.'s TIBCO EBX, TIBCO EBX, TIBCO EBX, TIBCO EBX Add-ons, TIBCO EBX Add-ons, TIBCO EBX Add-ons, and TIBCO Product and Service Catalog powered by TIBCO EBX contains an easily ex…

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00866 Published 2022-01-19 No fix listed CWE-79

TI-2023-11402 CVE-2023-26222 · GHSA-w499-v3vm-68xq

TIBCO EBX Cross-site Scripting (XXS) Vulnerability

LOW 38

The Web Application component of TIBCO Software Inc.'s TIBCO EBX and TIBCO Product and Service Catalog powered by TIBCO EBX contains an easily exploitable vulnerability that allows a low privileged attacker with network…

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.00468 Published 2023-11-14 No fix listed CWE-79

TI-2022-19970 CVE-2022-41565 · GHSA-qh67-j37g-7pfm

TIBCO EBX Cross Site Scripting (XSS) Vulnerability

LOW 38

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.00398 Published 2023-02-22 No fix listed CWE-79

TI-2021-06009 CVE-2021-23271 · GHSA-cxjj-qqpm-cpcq

TIBCO EBX Cross Site Scripting (XSS)

LOW 37

The TIBCO EBX Web Server component of TIBCO Software Inc.'s TIBCO EBX contains a vulnerability that theoretically allows a low privileged attacker with network access to execute a Stored Cross Site Scripting (XSS) attack…

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00933 Published 2021-02-02 No fix listed CWE-79

TI-2019-12931 CVE-2019-17333 · GHSA-4448-cxrj-jccx

TIBCO EBX Exposes Cross-Site Scripting Vulnerability

LOW 26

The Web server component of TIBCO Software Inc.'s TIBCO EBX contains a vulnerability that theoretically allows authenticated users to perform stored cross-site scripting (XSS) attacks.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00678 Published 2020-02-19 No fix listed CWE-79

TI-2024-04259 CVE-2024-4576 · GHSA-rf6j-jvpp-wpg9

TIBCO EBX File Inclusion Vulnerability

LOW 25

The component listed above contains a vulnerability that allows an attacker to traverse directories and access sensitive files, leading to unauthorized disclosure of system configuration and potentially sensitive informa…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00474 Published 2024-06-13 No fix listed CWE-22

Open these records in search →