CVE-2026-3207
Published Mar 17, 2026Configuration issue in Java Management Extensions (JMX) in TIBCO BPM Enterprise version 4.x allows unauthorised access.
- evidence mentions
- 1
- Buzz score
- 11.9
Vendor archive
tibco CVEs
Beta · best-effort225 CVEs tagged to vendor tibco — 42 Critical, 100 High, 82 Medium, 1 Low, 0 Unrated.
CVE-2025-3115
Published Apr 9, 2025Injection Vulnerabilities: Attackers can inject malicious code, potentially gaining control over the system executing these functions. Additionally, insufficient validation of fil…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2024-4576
Published Jun 13, 2024The component listed above contains a vulnerability that allows an attacker to traverse directories and access sensitive files, leading to unauthorized disclosure of system config…
CVE-2023-26222
Published Nov 14, 2023The Web Application component of TIBCO Software Inc.'s TIBCO EBX and TIBCO Product and Service Catalog powered by TIBCO EBX contains an easily exploitable vulnerability that allow…
CVE-2023-26221
Published Nov 8, 2023The Spotfire Connectors component of TIBCO Software Inc.'s Spotfire Analyst, Spotfire Server, and Spotfire for AWS Marketplace contains an easily exploitable vulnerability that al…
CVE-2023-26219
Published Oct 25, 2023The Hawk Console and Hawk Agent components of TIBCO Software Inc.'s TIBCO Hawk, TIBCO Hawk Distribution for TIBCO Silver Fabric, TIBCO Operational Intelligence Hawk RedTail, and T…
CVE-2023-26220
Published Oct 10, 2023The Spotfire Library component of TIBCO Software Inc.'s Spotfire Analyst and Spotfire Server contains an easily exploitable vulnerability that allows a low privileged attacker wit…
CVE-2023-26218
Published Sep 29, 2023The Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains easily exploitable Reflected Cross Site Scripting (XSS) vulnerabilities that allow a low privileged attacke…
CVE-2023-26217
Published Jul 19, 2023The Data Exchange Add-on component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an easily exploitable vulnerability that allows a low privileged user with import permission…
CVE-2023-26216
Published May 25, 2023The server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an exploitable vulnerability that allows an attacker to upload files to a directory accessible by the web…
CVE-2023-26215
Published May 25, 2023The server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains a vulnerability that allows an attacker with low-privileged application access to read system files that…
CVE-2023-29268
Published Apr 26, 2023The Splus Server component of TIBCO Software Inc.'s TIBCO Spotfire Statistics Services contains a vulnerability that allows an unauthenticated remote attacker to upload or modify…
CVE-2023-26214
Published Feb 22, 2023The BusinessConnect UI component of TIBCO Software Inc.'s TIBCO BusinessConnect contains easily exploitable Reflected Cross Site Scripting (XSS) vulnerabilities that allow a low p…
CVE-2022-41567
Published Feb 22, 2023The BusinessConnect UI component of TIBCO Software Inc.'s TIBCO BusinessConnect contains an easily exploitable vulnerability that allows a low privileged attacker with network acc…
CVE-2022-41566
Published Feb 22, 2023The server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute s…
CVE-2022-41565
Published Feb 22, 2023The Web Application component of TIBCO Software Inc.'s TIBCO EBX and TIBCO Product and Service Catalog powered by TIBCO EBX contains an easily exploitable vulnerability that allow…
CVE-2022-41564
Published Feb 14, 2023The Hawk Console component of TIBCO Software Inc.'s TIBCO Hawk and TIBCO Operational Intelligence Hawk RedTail contains a vulnerability that will return the EMS transport password…
CVE-2022-41563
Published Dec 13, 2022The Dashboard component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server…
CVE-2022-41562
Published Dec 13, 2022The HTML escaping component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Se…
CVE-2022-41561
Published Dec 13, 2022The JNDI Data Sources component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReport…
CVE-2022-41560
Published Dec 6, 2022The Statement Set Upload via the Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains an easily exploitable vulnerability that allows a low privileged attacker with…
CVE-2022-41559
Published Dec 6, 2022The Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains an easily exploitable vulnerability that allows an unauthenticated attacker with network access to exploit…
CVE-2022-41558
Published Nov 15, 2022The Visualizations component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analyst, TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace…
CVE-2022-30578
Published Sep 21, 2022The Web Server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execu…
CVE-2022-30577
Published Sep 21, 2022The Web Server component of TIBCO Software Inc.'s TIBCO EBX contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute Store…
Showing 1-25 of 225 CVEsPage 1 of 9