| Max CVSS | 10.0 | Min CVSS | 3.5 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2019-11208 | 6.5 |
The authorization component of TIBCO Software Inc.'s TIBCO API Exchange Gateway, and TIBCO API Exchange Gateway Distribution for TIBCO Silver Fabric contains a vulnerability that theoretically processes OAuth authorization incorrectly, leading to pot
|
29-03-2023 - 16:20 | 08-08-2019 - 16:15 | |
| CVE-2018-18809 | 4.0 |
The default server implementation of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library Community Edition, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server Community
|
01-03-2023 - 18:02 | 07-03-2019 - 22:29 | |
| CVE-2019-11204 | 4.0 |
The web interface component of TIBCO Software Inc.'s TIBCO Spotfire Statistics Services contains a vulnerability that might theoretically allow an authenticated user to access sensitive information needed by the Spotfire Statistics Services server. T
|
30-01-2023 - 19:03 | 14-05-2019 - 20:29 | |
| CVE-2019-11206 | 5.0 |
The Spotfire library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains vulnerabilities that theoretically allow a malicious user to undermine the integrity of comments and boo
|
30-01-2023 - 18:58 | 14-05-2019 - 20:29 | |
| CVE-2019-8992 | 6.5 |
The administrative server component of TIBCO Software Inc.'s TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric, TIBCO ActiveMatrix Policy Director, TIBCO ActiveMatrix Service Bus, TIBCO ActiveMatrix Service Grid, TIB
|
14-10-2022 - 11:18 | 24-04-2019 - 21:29 | |
| CVE-2019-8993 | 5.0 |
The administrative web server component of TIBCO Software Inc.'s TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric, TIBCO ActiveMatrix Policy Director, TIBCO ActiveMatrix Service Bus, TIBCO ActiveMatrix Service Grid,
|
14-10-2022 - 09:39 | 24-04-2019 - 21:29 | |
| CVE-2019-8995 | 5.8 |
The workspace client, openspace client, and app development client of TIBCO Software Inc.'s TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric, and TIBCO Silver Fabric Enabler for ActiveMatrix BPM contain a vulnerabil
|
14-10-2022 - 09:35 | 24-04-2019 - 21:29 | |
| CVE-2019-8990 | 6.8 |
The HTTP Connector component of TIBCO Software Inc.'s TIBCO ActiveMatrix BusinessWorks contains a vulnerability that theoretically allows unauthenticated HTTP requests to be processed by the BusinessWorks engine even when authentication is required.
|
14-10-2022 - 09:34 | 09-04-2019 - 18:29 | |
| CVE-2019-8988 | 5.5 |
The application server component of TIBCO Software Inc.'s TIBCO Data Science for AWS, and TIBCO Spotfire Data Science contains a persistent cross-site contains a vulnerability that theoretically allows a user to escalate their privileges on the affec
|
14-10-2022 - 09:33 | 26-03-2019 - 18:29 | |
| CVE-2019-8987 | 3.5 |
The application server component of TIBCO Software Inc.'s TIBCO Data Science for AWS, and TIBCO Spotfire Data Science contains a persistent cross-site scripting vulnerability that theoretically allows an authenticated user to gain access to all the c
|
14-10-2022 - 09:31 | 26-03-2019 - 18:29 | |
| CVE-2019-8991 | 6.8 |
The administrator web interface of TIBCO Software Inc.'s TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric, TIBCO ActiveMatrix Policy Director, TIBCO ActiveMatrix Service Bus, TIBCO ActiveMatrix Service Grid, TIBCO S
|
14-10-2022 - 09:30 | 24-04-2019 - 21:29 | |
| CVE-2019-8989 | 4.0 |
The application server component of TIBCO Software Inc.'s TIBCO Data Science for AWS, and TIBCO Spotfire Data Science contains a vulnerability that theoretically enables a user to spoof their account to look like a different user in the affected syst
|
01-01-2022 - 20:16 | 26-03-2019 - 18:29 | |
| CVE-2019-8986 | 4.0 |
The SOAP API component vulnerability of TIBCO Software Inc.'s TIBCO JasperReports Server, and TIBCO JasperReports Server for ActiveMatrix BPM contains a vulnerability that may allow a malicious authenticated user to copy text files from the host oper
|
01-01-2022 - 20:15 | 07-03-2019 - 22:29 | |
| CVE-2019-8994 | 4.9 |
The workspace client of TIBCO Software Inc.'s TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric, and TIBCO Silver Fabric Enabler for ActiveMatrix BPM contains vulnerabilities where an authenticated user can change se
|
06-11-2021 - 03:39 | 24-04-2019 - 21:29 | |
| CVE-2019-11203 | 4.3 |
The workspace client, openspace client, app development client, and REST API of TIBCO Software Inc.'s TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric, and TIBCO Silver Fabric Enabler for ActiveMatrix BPM contain cr
|
06-11-2021 - 03:38 | 24-04-2019 - 21:29 | |
| CVE-2019-17335 | 4.0 |
The Data access layer component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains multiple vulnerabilities that theoretically allow an attacker access to data cached from a data source,
|
21-07-2021 - 11:39 | 17-12-2019 - 21:15 | |
| CVE-2018-18812 | 3.5 |
The Spotfire Library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains a vulnerability that might theoretically fail to restrict users with read-only access from modifying fil
|
24-08-2020 - 17:37 | 16-01-2019 - 22:29 | |
| CVE-2019-17336 | 4.0 |
The Data access layer component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains multiple vulnerabilities that theoretically allow an attacker access to information that can lead to obt
|
24-08-2020 - 17:37 | 17-12-2019 - 21:15 | |
| CVE-2018-18810 | 4.0 |
The Administrator Service component of TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center, and TIBCO Managed File Transfer Internet Server contains vulnerabilities where an authenticated user with specific privileges can gain access to
|
24-08-2020 - 17:37 | 11-12-2018 - 19:29 | |
| CVE-2019-11211 | 9.0 |
The server component of TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition, and TIBCO Spotfire Analytics Platform for AWS Marketplace contains a vulnerability that theoretically allows an authenticated user to trigger remote code e
|
24-08-2020 - 17:37 | 18-09-2019 - 23:15 | |
| CVE-2019-11210 | 10.0 |
The server component of TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition, and TIBCO Spotfire Analytics Platform for AWS Marketplace contains a vulnerability that theoretically allows an unauthenticated user to bypass access contr
|
24-08-2020 - 17:37 | 18-09-2019 - 23:15 | |
| CVE-2018-12415 | 6.8 |
The Central Administration server (emsca) component of TIBCO Software Inc.'s TIBCO Enterprise Message Service, TIBCO Enterprise Message Service - Community Edition, and TIBCO Enterprise Message Service - Developer Edition contains a vulnerability whi
|
29-01-2020 - 16:15 | 06-11-2018 - 23:29 | |
| CVE-2019-17334 | 6.0 |
The Visualizations component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Deployment Kit, TIBCO Spotfire Desktop, and TIBCO Spotfire Desktop Language Packs contains a vulnerabi
|
27-12-2019 - 13:14 | 17-12-2019 - 21:15 | |
| CVE-2019-17337 | 4.3 |
The Spotfire library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains a vulnerability that theoretically allows an attacker to perform a reflected cross-site scripting (XSS) a
|
20-12-2019 - 19:56 | 17-12-2019 - 21:15 | |
| CVE-2019-17330 | 4.3 |
The Web server component of TIBCO Software Inc.'s TIBCO EBX contains multiple vulnerabilities that theoretically allow authenticated users to perform stored cross-site scripting (XSS) attacks, and unauthenticated users to perform reflected cross-site
|
18-11-2019 - 16:28 | 12-11-2019 - 20:15 | |
| CVE-2019-17331 | 3.5 |
The Data Exchange Web Interface component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains a vulnerability that theoretically allows authenticated users to perform stored cross-site scripting (XSS) attacks. Affected releases are TIBCO Software Inc
|
15-11-2019 - 03:03 | 12-11-2019 - 20:15 | |
| CVE-2019-17332 | 4.3 |
The Digital Asset Manager Web Interface component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains a vulnerability that theoretically allows authenticated users to perform stored cross-site scripting (XSS) attacks. Affected releases are TIBCO Soft
|
15-11-2019 - 02:38 | 12-11-2019 - 20:15 | |
| CVE-2019-11207 | 6.8 |
The web server component of TIBCO Software Inc.'s TIBCO LogLogic Enterprise Virtual Appliance, and TIBCO LogLogic Log Management Intelligence contains multiple vulnerabilities that theoretically allow persistent and reflected cross-site scripting (XS
|
09-10-2019 - 23:45 | 13-08-2019 - 21:15 | |
| CVE-2018-5436 | 4.0 |
The Spotfire server component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contain multiple vulnerabilities that may allow for the disclosure of information, including user and data source
|
09-10-2019 - 23:41 | 27-06-2018 - 16:29 | |
| CVE-2018-5435 | 10.0 |
The TIBCO Spotfire Client and TIBCO Spotfire Web Player Client components of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Deployment Kit, TIBCO Spotfire Desktop, and TIBCO Spotfir
|
09-10-2019 - 23:41 | 27-06-2018 - 16:29 | |
| CVE-2018-5437 | 4.0 |
The TIBCO Spotfire Client and TIBCO Spotfire Web Player Client components of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Deployment Kit, TIBCO Spotfire Desktop, and TIBCO Spotfir
|
09-10-2019 - 23:41 | 27-06-2018 - 16:29 | |
| CVE-2018-18808 | 8.5 |
The domain management component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Repo
|
09-10-2019 - 23:37 | 07-03-2019 - 22:29 | |
| CVE-2018-18814 | 7.5 |
The TIBCO Spotfire authentication component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains a vulnerability in the handling of the authentication that theoretically may allow an attac
|
09-10-2019 - 23:37 | 16-01-2019 - 22:29 | |
| CVE-2018-18813 | 4.3 |
The Spotfire web server component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains multiple vulnerabilities that may allow persistent and reflected cross-site scripting attacks. Affect
|
09-10-2019 - 23:37 | 16-01-2019 - 22:29 | |
| CVE-2018-18807 | 3.5 |
The web application of the TIBCO Statistica component of TIBCO Software Inc.'s TIBCO Statistica Server contains vulnerabilities which may allow an authenticated user to perform cross-site scripting (XSS) attacks. Affected releases are TIBCO Software
|
09-10-2019 - 23:37 | 26-11-2018 - 20:29 | |
| CVE-2018-18816 | 3.5 |
The repository component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, TIBCO Jaspersoft Reporting and A
|
09-10-2019 - 23:37 | 07-03-2019 - 22:29 | |
| CVE-2018-12411 | 6.8 |
The administrative daemon (tibdgadmind) of TIBCO Software Inc.'s TIBCO ActiveSpaces - Community Edition, TIBCO ActiveSpaces - Developer Edition, and TIBCO ActiveSpaces - Enterprise Edition contains a vulnerability which may allow an attacker to perfo
|
09-10-2019 - 23:33 | 06-11-2018 - 23:29 | |
| CVE-2018-12414 | 6.8 |
The Rendezvous Routing Daemon (rvrd), Rendezvous Secure Routing Daemon (rvrsd), Rendezvous Secure Daemon (rvsd), Rendezvous Cache (rvcache), and Rendezvous Daemon Manager (rvdm) components of TIBCO Software Inc.'s TIBCO Rendezvous, TIBCO Rendezvous D
|
09-10-2019 - 23:33 | 06-11-2018 - 23:29 | |
| CVE-2018-12413 | 6.8 |
The Schema repository server (tibschemad) component of TIBCO Software Inc.'s TIBCO Messaging - Apache Kafka Distribution - Schema Repository - Community Edition, and TIBCO Messaging - Apache Kafka Distribution - Schema Repository - Enterprise Edition
|
09-10-2019 - 23:33 | 06-11-2018 - 23:29 | |
| CVE-2018-12412 | 6.8 |
The realm server (tibrealmserver) component of TIBCO Software Inc. TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, and TIBCO FTL - Enterprise Edition contains a vulnerability which may allow an attacker to perform cross-site request for
|
09-10-2019 - 23:33 | 06-11-2018 - 23:29 | |
| CVE-2018-12408 | 5.0 |
The BusinessWorks engine component of TIBCO Software Inc.'s TIBCO ActiveMatrix BusinessWorks, TIBCO ActiveMatrix BusinessWorks for z/Linux, and TIBCO ActiveMatrix BusinessWorks Distribution for TIBCO Silver Fabric contains a vulnerability that may al
|
09-10-2019 - 23:33 | 08-08-2018 - 14:29 | |
| CVE-2017-5531 | 6.5 |
Deployments of TIBCO Managed File Transfer Command Center versions 8.0.0 and 8.0.1 and TIBCO Managed File Transfer Internet Server versions 8.0.0 and 8.0.1 that enable the Administrator Service may be affected by a vulnerability which may allow any a
|
09-10-2019 - 23:28 | 17-10-2017 - 20:29 | |
| CVE-2018-18815 | 7.5 |
The REST API component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and
|
03-10-2019 - 00:03 | 07-03-2019 - 22:29 | |
| CVE-2019-11205 | 4.3 |
The web server component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains vulnerabilities that theoretically allow reflected cross-site scripting (XSS) attacks. Affected releases are T
|
20-05-2019 - 16:29 | 14-05-2019 - 20:29 | |
| CVE-2018-12409 | 4.3 |
The SOAP Admin API component of TIBCO Software Inc.'s TIBCO Silver Fabric contains a vulnerability that may allow reflected cross-site scripting (XSS) attacks. Affected releases are TIBCO Software Inc.'s TIBCO Silver Fabric: versions up to and includ
|
20-02-2019 - 20:05 | 13-02-2019 - 18:29 |