TIBCO

Records236All Threatist records

Exploited (KEV)2In CISA KEV

CVSS critical52CVSS 9.0–10.0

CVSS high109CVSS 7.0–8.9

Exploited now

TIBCO records in CISA KEV

TI-2018-13320 TIBCO JasperReports Library Directory Traversal Vulnerability CRITICAL 88KEV 2022-12-29 TI-2018-03944 TIBCO JasperReports Server Information Disclosure Vulnerability CRITICAL 95KEV 2022-12-29

Components

Products in the NVD configurations · select one to filter the records

Spotfire Server 28 records MEDIUM Jasperreports Server 22 records CRITICAL Spotfire Analytics Platform For Aws 20 records MEDIUM Rendezvous 16 records MEDIUM Spotfire Analyst 12 records MEDIUM Enterprise Message Service 11 records MEDIUM Jaspersoft 10 records CRITICAL Jaspersoft Reporting And Analytics 10 records CRITICAL

Records

11 records in Enterprise Message Service · all components

TI-2009-01226 CVE-2009-1291 · GHSA-fq52-j5vg-rwj5

Stack-based buffer overflow in TIBCO SmartSockets before 6.8.2, SmartSockets Product…

MEDIUM 52

Stack-based buffer overflow in TIBCO SmartSockets before 6.8.2, SmartSockets Product Family (aka RTworks) before 4.0.5, and Enterprise Message Service (EMS) 4.0.0 through 5.1.1, as used in SmartSockets Server and RTworks…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.0643 Published 2009-04-30 No fix listed CWE-119

TI-2007-05438 CVE-2007-5658 · GHSA-qjw3-ggxq-6875

Heap-based buffer overflow in TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks…

MEDIUM 52

Heap-based buffer overflow in TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterprise Message Service (EMS) 4.0.0 through 4.4.1 allows remote attackers to execute arbitrary code via crafted re…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06401 Published 2008-01-16 No fix listed CWE-20

TI-2008-01633 CVE-2008-1704 · GHSA-mpvx-j3m8-j2hq

Multiple buffer overflows in TIBCO Software Enterprise Message Service (EMS) before…

MEDIUM 51

Multiple buffer overflows in TIBCO Software Enterprise Message Service (EMS) before 4.4.3, and iProcess Engine 10.6.0 through 10.6.1, allow remote attackers to execute arbitrary code via a crafted message to the EMS serv…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05359 Published 2008-04-11 No fix listed CWE-119

TI-2007-05437 CVE-2007-5657 · GHSA-4vjj-hp93-6mc6

TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterprise…

MEDIUM 51

TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterprise Message Service (EMS) 4.0.0 through 4.4.1 allows remote attackers to execute arbitrary code via crafted requests containing values that…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.0555 Published 2008-01-16 No fix listed CWE-20

TI-2007-05436 CVE-2007-5656 · GHSA-pp4m-55cm-6994

TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterprise…

MEDIUM 51

TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterprise Message Service (EMS) 4.0.0 through 4.4.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary co…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05437 Published 2008-01-16 No fix listed CWE-399

TI-2007-05435 CVE-2007-5655 · GHSA-6x8f-7m3j-wphq

TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterprise…

MEDIUM 51

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.0555 Published 2008-01-16 No fix listed CWE-119

TI-2016-03078 CVE-2016-3628 · GHSA-p8rh-j2f6-9wmr

Buffer overflow in tibemsd in the server in TIBCO Enterprise Message Service (EMS) before…

MEDIUM 42

Buffer overflow in tibemsd in the server in TIBCO Enterprise Message Service (EMS) before 8.3.0 and EMS Appliance before 2.4.0 allows remote authenticated users to cause a denial of service or possibly execute arbitrary…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.02167 Published 2016-04-20 No fix listed CWE-119

TI-2018-08914 CVE-2018-12415 · GHSA-wch7-4w8f-vg94

TIBCO Enterprise Message Service Vulnerable to CSRF Attacks

MEDIUM 40

The Central Administration server (emsca) component of TIBCO Software Inc.'s TIBCO Enterprise Message Service, TIBCO Enterprise Message Service - Community Edition, and TIBCO Enterprise Message Service - Developer Editio…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00871 Published 2018-11-07 No fix listed CWE-352

TI-2021-09813 CVE-2021-28822 · GHSA-xpvq-rpfc-g9rw

TIBCO Enterprise Message Service Windows Platform Artifact Search vulnerability

LOW 38

The Enterprise Message Service Server (tibemsd), Enterprise Message Service Central Administration (tibemsca), Enterprise Message Service JSON configuration generator (tibemsconf2json), and Enterprise Message Service C A…

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00257 Published 2021-03-23 No fix listed CWE-427

TI-2021-09812 CVE-2021-28821 · GHSA-j7g9-pj98-m5m7

TIBCO Enterprise Message Service Windows Platform Installation vulnerability

LOW 37

The Windows Installation component of TIBCO Software Inc.'s TIBCO Enterprise Message Service, TIBCO Enterprise Message Service - Community Edition, and TIBCO Enterprise Message Service - Developer Edition contains a vuln…

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00224 Published 2021-03-23 No fix listed CWE-863

TI-2011-00566 CVE-2011-0649 · GHSA-hwqv-g52g-rgvm

Multiple unspecified vulnerabilities in TIBCO Rendezvous 8.2.1 through 8.3.0, Enterprise…

LOW 32

Multiple unspecified vulnerabilities in TIBCO Rendezvous 8.2.1 through 8.3.0, Enterprise Message Service (EMS) 5.1.0 through 6.0.0, Runtime Agent (TRA) 5.6.2 through 5.7.0, Silver BPM Service before 1.0.4, Silver CAP Ser…

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.00375 Published 2011-02-04 No fix listed

Open these records in search →

Critical	52
High	109
Medium	74
Low	1
No CVSS	0