Skip to content
Noroxi

TIBCO records

230 published records for vendor tibco.

Researcher profile

Entered KEV
2 · 0.9%
Weaponized
2 · 0.9%
Pre-auth RCE
21
With a fix record
2.2%
Median publish → KEV
1555 days

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25
  10. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

230 records
  • CVE-2018-18809
    80Now

    TIBCO JasperReports Library Directory Traversal Vulnerability

    MediumCVSS 6.5KEVWeaponizedEPSS 79%

    tibco · jasperreports libraryMar 7, 2019

  • CVE-2018-5430
    79This week

    TIBCO JasperReports Server Information Disclosure Vulnerability

    HighCVSS 8.8KEVWeaponizedEPSS 48%

    tibco · jasperreports serverApr 17, 2018

  • CVE-2009-1291
    42Plan

    Stack-based buffer overflow in TIBCO SmartSockets before 6.8.2, SmartSockets Product Family (aka RTworks) before 4.0.5, and Enterprise Messa

    CriticalCVSS 10.0No exploitEPSS 6%

    tibco · enterprise message serviceApr 30, 2009

  • CVE-2007-5658
    42Plan

    Heap-based buffer overflow in TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterprise Message Service (EMS) 4.0.

    CriticalCVSS 10.0No exploitEPSS 6%

    tibco · enterprise message serviceJan 15, 2008

  • CVE-2007-5657
    42Plan

    TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterprise Message Service (EMS) 4.0.0 through 4.4.1 allows remote

    CriticalCVSS 10.0No exploitEPSS 5%

    tibco · rtworksJan 15, 2008

  • CVE-2007-5655
    42Plan

    TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterprise Message Service (EMS) 4.0.0 through 4.4.1 allows remote

    CriticalCVSS 10.0No exploitEPSS 5%

    tibco · rtworksJan 15, 2008

  • CVE-2007-5656
    42Plan

    TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterprise Message Service (EMS) 4.0.0 through 4.4.1 allows remote

    CriticalCVSS 10.0No exploitEPSS 5%

    tibco · enterprise message serviceJan 15, 2008

  • CVE-2008-1704
    42Plan

    Multiple buffer overflows in TIBCO Software Enterprise Message Service (EMS) before 4.4.3, and iProcess Engine 10.6.0 through 10.6.1, allow

    CriticalCVSS 10.0No exploitEPSS 5%

    tibco · enterprise message serviceApr 11, 2008

  • CVE-2008-3338
    41Plan

    Multiple buffer overflows in TIBCO Hawk (1) AMI C library (libtibhawkami) and (2) Hawk HMA (tibhawkhma), as used in TIBCO Hawk before 4.8.1;

    CriticalCVSS 10.0No exploitEPSS 4%

    tibco · hawkAug 13, 2008

  • CVE-2010-3491
    41Plan

    The (1) ActiveMatrix Runtime and (2) ActiveMatrix Administrator components in TIBCO ActiveMatrix Service Grid before 2.3.1, ActiveMatrix Ser

    CriticalCVSS 10.0No exploitEPSS 4%

    tibco · activematrix businessworks service engineOct 26, 2010

  • CVE-2019-11210
    41Plan

    TIBCO Enterprise Runtime for R Server Exposes Remote Code Execution

    CriticalCVSS 10.0No exploitEPSS 3%

    tibco · enterprise runtime for rSep 18, 2019

  • CVE-2014-2075
    41Plan

    TIBCO Enterprise Administrator 1.0.0 and Enterprise Administrator SDK 1.0.0 do not properly enforce administrative authentication requiremen

    CriticalCVSS 10.0No exploitEPSS 3%

    tibco · enterprise administratorFeb 27, 2014

  • CVE-2018-12410
    40Plan

    TIBCO Spotfire Statistics Services remote execution vulnerabilities

    CriticalCVSS 9.8No exploitEPSS 3%

    tibco · spotfire statistics servicesOct 10, 2018

  • CVE-2019-11211
    40Plan

    TIBCO Enterprise Runtime for R Server Running On Linux With Containerized TERR Service Vulnerable To Remote Code Execution

    CriticalCVSS 9.9No exploitEPSS 3%

    tibco · enterprise runtime for rSep 18, 2019

  • CVE-2020-9409
    40Plan

    TIBCO JasperReports Server Fails To Enforce Access Restrictions

    CriticalCVSS 9.8No exploitEPSS 3%

    tibco · jasperreports serverMay 20, 2020

  • CVE-2018-5435
    40Plan

    TIBCO Spotfire Product Family Remote Code Execution Vulnerability

    CriticalCVSS 9.8No exploitEPSS 3%

    tibco · spotfire analystJun 27, 2018

  • CVE-2018-18815
    40Plan

    TIBCO JasperReports Server User Information Disclosure

    CriticalCVSS 9.8No exploitEPSS 3%

    tibco · jasperreports serverMar 7, 2019

  • CVE-2018-18814
    40Plan

    TIBCO Spotfire Authentication Vulnerability

    CriticalCVSS 9.8No exploitEPSS 3%

    tibco · spotfire analytics platform for awsJan 16, 2019

  • CVE-2019-8993
    40Plan

    TIBCO Active Matrix Service Grid Administrator Unauthenticated Download of Sensitive File

    CriticalCVSS 9.8No exploitEPSS 2%

    tibco · activematrix bpmApr 24, 2019

  • CVE-2020-9412
    40Plan

    TIBCO Managed File Transfer Platform Server for IBM i Arbitrary Command Execution

    CriticalCVSS 9.8No exploitEPSS 2%

    tibco · managed file transfer platform serverJun 9, 2020

  • CVE-2017-5533
    40Plan

    TIBCO JasperReports Server credentials disclosure

    CriticalCVSS 9.8No exploitEPSS 2%

    tibco · jasperreports serverNov 15, 2017

  • CVE-2017-3181
    40Plan

    Multiple TIBCO Spotfire components are vulnerable to multiple unspecified SQL-injection vulnerabilities because it fails to properly sanitize user-supplied inpu

    CriticalCVSS 9.8No exploitEPSS 1%

    tibco · spotfire analystJul 24, 2018

  • CVE-2020-9411
    39Monitor

    TIBCO Managed File Transfer Platform Server for IBM i Authentication Bypass

    CriticalCVSS 9.8No exploitEPSS 1%

    tibco · managed file transfer platform serverJun 9, 2020

  • CVE-2021-43049
    39Monitor

    TIBCO BusinessConnect Container Edition username and password leakage

    CriticalCVSS 9.8No exploitEPSS 1%

    tibco · businessconnectFeb 15, 2022

  • CVE-2021-35498
    39Monitor

    TIBCO EBX Insecure Login Mechanism

    CriticalCVSS 9.8No exploitEPSS 1%

    tibco · ebxOct 13, 2021