Read the docs

TIBCO

Records236All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical52CVSS 9.0–10.0
CVSS high109CVSS 7.0–8.9

Exploited now

TIBCO records in CISA KEV
TI-2018-13320 TIBCO JasperReports Library Directory Traversal Vulnerability Priority CRITICAL 88KEV 2022-12-29TI-2018-03944 TIBCO JasperReports Server Information Disclosure Vulnerability Priority CRITICAL 95KEV 2022-12-29

Components

Products in the NVD configurations · select one to filter the records
Spotfire Server 28 records MEDIUM Jasperreports Server 22 records CRITICAL Spotfire Analytics Platform For Aws 20 records MEDIUM Rendezvous 16 records MEDIUM Spotfire Analyst 12 records MEDIUM Enterprise Message Service 11 records MEDIUM Jaspersoft 10 records CRITICAL Jaspersoft Reporting And Analytics 10 records CRITICAL

Records

9 records in Ebx Add-ons · all components

TI-2023-11396 CVE-2023-26216 · GHSA-rrxj-c2rq-pqr4

TIBCO EBX Add-ons Arbitrary File Write

Priority MEDIUM 43

The server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an exploitable vulnerability that allows an attacker to upload files to a directory accessible by the web server.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00755 Published 2023-05-25 No fix listed CWE-22
TI-2022-12724 CVE-2022-30578 · GHSA-rjwp-g2qw-rcv6

TIBCO EBX Add-ons Stored XSS vulnerability

Priority MEDIUM 43

The Web Server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute Stored Cross Site Scripting (XSS) on t…

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.01057 Published 2022-09-21 No fix listed CWE-79
TI-2023-11397 CVE-2023-26217 · GHSA-6hvj-j96w-8755

TIBCO EBX Add-ons SQL Injection Vulnerability

Priority MEDIUM 41

The Data Exchange Add-on component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an easily exploitable vulnerability that allows a low privileged user with import permissions and network access to the EBX server to…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00733 Published 2023-07-19 No fix listed CWE-89
TI-2022-07018 CVE-2022-22769 · GHSA-v9xg-xqj3-g2w8

TIBCO EBX vulnerabilities

Priority MEDIUM 40

The Web server component of TIBCO Software Inc.'s TIBCO EBX, TIBCO EBX, TIBCO EBX, TIBCO EBX Add-ons, TIBCO EBX Add-ons, TIBCO EBX Add-ons, and TIBCO Product and Service Catalog powered by TIBCO EBX contains an easily ex…

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00866 Published 2022-01-19 No fix listed CWE-79
TI-2022-19971 CVE-2022-41566 · GHSA-r589-frfj-qqhf

TIBCO EBX Add-ons Cross Site Scripting (XSS) Vulnerability

Priority LOW 38

The server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute stored XSS on the affected system.

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.00398 Published 2023-02-22 No fix listed CWE-79
TI-2023-11395 CVE-2023-26215 · GHSA-57r8-4369-33xg

TIBCO EBX® Add-ons Path Traversal

Priority LOW 35

The server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains a vulnerability that allows an attacker with low-privileged application access to read system files that are accessible to the web server.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00657 Published 2023-05-25 No fix listed CWE-203
TI-2020-16499 CVE-2020-27148 · GHSA-x33g-fm74-m47v

TIBCO EBX EXML External Entity

Priority LOW 33

The TIBCO EBX Add-on for Oracle Hyperion EPM, TIBCO EBX Data Exchange Add-on, and TIBCO EBX Insight Add-on components of TIBCO Software Inc.'s TIBCO EBX Add-ons contain a vulnerability that theoretically allows a low pri…

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.01064 Published 2021-01-12 No fix listed CWE-611
TI-2019-12930 CVE-2019-17332 · GHSA-3q42-g7pm-w4xc

TIBCO EBX Add-on For Digital Asset Manager Cross-Site Scripting Vulnerabilities

Priority LOW 26

The Digital Asset Manager Web Interface component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains a vulnerability that theoretically allows authenticated users to perform stored cross-site scripting (XSS) attacks.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00717 Published 2019-11-12 No fix listed CWE-79
TI-2019-12929 CVE-2019-17331 · GHSA-mrhx-hcg2-5p6w

TIBCO EBX Add-on For Data Exchange Cross-Site Scripting Vulnerabilities

Priority LOW 25

The Data Exchange Web Interface component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains a vulnerability that theoretically allows authenticated users to perform stored cross-site scripting (XSS) attacks.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00609 Published 2019-11-12 No fix listed CWE-79
Open these records in search →