https://vulnogram.org/ Most recent CVEs assigned by TIBCO Software Inc. (tibco). https://vulnogram.org/seaview/icons/tibco.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-4034 https://vulnogram.org/CVE-2026-4034 Injection Vulnerability in Tibco Administrator version 5.13.0 & prior allows an authenticated user to submit specially crafted input through the web-based administration console. High Tue, 29 Sep 2026 13:05:18 GMT https://vulnogram.org/CVE-2026-3912 https://vulnogram.org/CVE-2026-3912 Injection vulnerabilities due to validation/sanitisation of user-supplied input in ActiveMatrix BusinessWorks and Enterprise Administrator allows information disclosure, including exposure of accessible local files and host system details, and may al… High Tue, 24 Mar 2026 20:44:06 GMT https://vulnogram.org/CVE-2026-3207 https://vulnogram.org/CVE-2026-3207 Configuration issue in Java Management Extensions (JMX) in TIBCO BPM Enterprise version 4.x allows unauthorised access. High Tue, 17 Mar 2026 18:20:16 GMT https://vulnogram.org/CVE-2025-11548 https://vulnogram.org/CVE-2025-11548 A remote, unauthenticated privilege escalation in ibi WebFOCUS allows an attacker to gain administrative access to the application which may lead to unauthenticated Remote Code Execution Critical Network Exploitable Tue, 14 Oct 2025 16:45:08 GMT https://vulnogram.org/CVE-2025-2261 https://vulnogram.org/CVE-2025-2261 Stored XSS in TIBCO ActiveMatrix Administrator allows malicious data to appear to be part of the website and run within user's browser under the privileges of the web application. High Wed, 21 May 2025 18:29:53 GMT https://vulnogram.org/CVE-2025-3751 https://vulnogram.org/CVE-2025-3751 The component listed above contains a vulnerability that can be exploited by an attacker to perform a SQL Injection attack. This could lead to unauthorised access to the database and exposure of sensitive information High Wed, 21 May 2025 18:12:59 GMT https://vulnogram.org/CVE-2025-3115 https://vulnogram.org/CVE-2025-3115 Injection Vulnerabilities: Attackers can inject malicious code, potentially gaining control over the system executing these functions. Additionally, insufficient validation of filenames during file uploads can enable attackers to upload and execute m… Critical Wed, 09 Apr 2025 18:12:28 GMT https://vulnogram.org/CVE-2025-3114 https://vulnogram.org/CVE-2025-3114 Code Execution via Malicious Files: Attackers can create specially crafted files with embedded code that may execute without adequate security validation, potentially leading to system compromise. Sandbox Bypass Vulnerability: A flaw in the TERR secu… Critical Wed, 09 Apr 2025 17:29:48 GMT https://vulnogram.org/CVE-2024-10218 https://vulnogram.org/CVE-2024-10218 XSS Attack in mar.jar, Monitoring Archive Utility (MAR Utility), monitoringconsolecommon.jar in TIBCO Software Inc TIBCO Hawk and TIBCO Operational Intelligence Critical Tue, 12 Nov 2024 19:14:00 GMT https://vulnogram.org/CVE-2024-10217 https://vulnogram.org/CVE-2024-10217 XSS Attack in mar.jar, Monitoring Archive Utility (MAR Utility), monitoringconsolecommon.jar in TIBCO Software Inc TIBCO Hawk and TIBCO Operational Intelligence Critical Tue, 12 Nov 2024 19:12:54 GMT https://vulnogram.org/CVE-2024-3325 https://vulnogram.org/CVE-2024-3325 Vulnerability in Jaspersoft JasperReport Servers.This issue affects JasperReport Servers: from 8.0.4 through 9.0.0. High Wed, 10 Jul 2024 17:02:14 GMT https://vulnogram.org/CVE-2024-3331 https://vulnogram.org/CVE-2024-3331 Vulnerability in Spotfire Spotfire Enterprise Runtime for R - Server Edition, Spotfire Spotfire Statistics Services, Spotfire Spotfire Analyst, Spotfire Spotfire Desktop, Spotfire Spotfire Server allows The impact of this vulnerability depends on the… Medium Thu, 27 Jun 2024 18:50:13 GMT https://vulnogram.org/CVE-2024-3330 https://vulnogram.org/CVE-2024-3330 Vulnerability in Spotfire Spotfire Analyst, Spotfire Spotfire Server, Spotfire Spotfire for AWS Marketplace allows In the case of the installed Windows client: Successful execution of this vulnerability will result in an attacker being able to run ar… Critical Thu, 27 Jun 2024 18:37:34 GMT https://vulnogram.org/CVE-2024-4576 https://vulnogram.org/CVE-2024-4576 The component listed above contains a vulnerability that allows an attacker to traverse directories and access sensitive files, leading to unauthorized disclosure of system configuration and potentially sensitive information. Medium Network Exploitable Thu, 13 Jun 2024 06:31:41 GMT https://vulnogram.org/CVE-2024-3182 https://vulnogram.org/CVE-2024-3182 Install-type password disclosure vulnerability in Universal Installer including the Silent Installer in TIBCO Hawk versions 6.2.0, 6.2.1, 6.2.2 and 6.2.3 allows user's Enterprise Message Service (EMS) password to be exposed outside of the hawkagent.c… Medium Wed, 15 May 2024 18:04:49 GMT https://vulnogram.org/CVE-2024-3323 https://vulnogram.org/CVE-2024-3323 Cross Site Scripting in UI Request/Response Validation in TIBCO JasperReports Server 8.0.4 and 8.2.0 allows allows for the injection of malicious executable scripts into the code of a trusted application that may lead to stealing the user's active se… High Wed, 17 Apr 2024 18:53:21 GMT https://vulnogram.org/CVE-2024-1137 https://vulnogram.org/CVE-2024-1137 The Proxy and Client components of TIBCO Software Inc.'s TIBCO ActiveSpaces - Enterprise Edition contain a vulnerability that theoretically allows an Active Spaces client to passively observe data traffic to other clients. Affected releases are TIBCO… Medium Tue, 12 Mar 2024 17:31:19 GMT https://vulnogram.org/CVE-2024-1138 https://vulnogram.org/CVE-2024-1138 The FTL Server component of TIBCO Software Inc.'s TIBCO FTL - Enterprise Edition contains a vulnerability that allows a low privileged attacker with network access to execute a privilege escalation on the affected ftlserver. Affected releases are TIB… High Tue, 12 Mar 2024 17:30:15 GMT https://vulnogram.org/CVE-2023-26222 https://vulnogram.org/CVE-2023-26222 The Web Application component of TIBCO Software Inc.'s TIBCO EBX and TIBCO Product and Service Catalog powered by TIBCO EBX contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute a stored XSS… High Tue, 14 Nov 2023 19:29:09 GMT https://vulnogram.org/CVE-2023-26221 https://vulnogram.org/CVE-2023-26221 The Spotfire Connectors component of TIBCO Software Inc.'s Spotfire Analyst, Spotfire Server, and Spotfire for AWS Marketplace contains an easily exploitable vulnerability that allows a low privileged attacker with read/write access to craft maliciou… Medium Wed, 08 Nov 2023 19:44:03 GMT https://vulnogram.org/CVE-2023-26219 https://vulnogram.org/CVE-2023-26219 The Hawk Console and Hawk Agent components of TIBCO Software Inc.'s TIBCO Hawk, TIBCO Hawk Distribution for TIBCO Silver Fabric, TIBCO Operational Intelligence Hawk RedTail, and TIBCO Runtime Agent contain a vulnerability that theoretically allows an… High Tue, 24 Oct 2023 21:56:50 GMT https://vulnogram.org/CVE-2023-26220 https://vulnogram.org/CVE-2023-26220 The Spotfire Library component of TIBCO Software Inc.'s Spotfire Analyst and Spotfire Server contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute a Stored Cross Site Scripting (XSS) on the… Medium Tue, 10 Oct 2023 22:06:36 GMT https://vulnogram.org/CVE-2023-26218 https://vulnogram.org/CVE-2023-26218 The Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains easily exploitable Reflected Cross Site Scripting (XSS) vulnerabilities that allow a low privileged attacker to social engineer a legitimate user with network access to execute s… High Fri, 29 Sep 2023 17:07:11 GMT https://vulnogram.org/CVE-2023-26217 https://vulnogram.org/CVE-2023-26217 The Data Exchange Add-on component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an easily exploitable vulnerability that allows a low privileged user with import permissions and network access to the EBX server to execute arbitrary SQL stateme… High Wed, 19 Jul 2023 20:36:45 GMT https://vulnogram.org/CVE-2023-26215 https://vulnogram.org/CVE-2023-26215 The server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains a vulnerability that allows an attacker with low-privileged application access to read system files that are accessible to the web server. Affected releases are TIBCO Software I… High Thu, 25 May 2023 18:41:43 GMT https://vulnogram.org/CVE-2023-26216 https://vulnogram.org/CVE-2023-26216 The server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an exploitable vulnerability that allows an attacker to upload files to a directory accessible by the web server. Affected releases are TIBCO Software Inc.'s TIBCO EBX Add-ons:… Critical Thu, 25 May 2023 18:38:21 GMT https://vulnogram.org/CVE-2023-29268 https://vulnogram.org/CVE-2023-29268 The Splus Server component of TIBCO Software Inc.'s TIBCO Spotfire Statistics Services contains a vulnerability that allows an unauthenticated remote attacker to upload or modify arbitrary files within the web server directory on the affected system.… Critical Network Exploitable Wed, 26 Apr 2023 17:24:18 GMT https://vulnogram.org/CVE-2023-26214 https://vulnogram.org/CVE-2023-26214 The BusinessConnect UI component of TIBCO Software Inc.'s TIBCO BusinessConnect contains easily exploitable Reflected Cross Site Scripting (XSS) vulnerabilities that allow a low privileged attacker with network access to execute scripts targeting the… High Wed, 22 Feb 2023 00:00:00 GMT https://vulnogram.org/CVE-2022-41567 https://vulnogram.org/CVE-2022-41567 The BusinessConnect UI component of TIBCO Software Inc.'s TIBCO BusinessConnect contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute a cross-site scripting (XSS) attack on the affected syst… High Wed, 22 Feb 2023 00:00:00 GMT https://vulnogram.org/CVE-2022-41566 https://vulnogram.org/CVE-2022-41566 The server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute stored XSS on the affected system. Affected releases are TIBCO Software… High Wed, 22 Feb 2023 00:00:00 GMT https://vulnogram.org/CVE-2022-41565 https://vulnogram.org/CVE-2022-41565 The Web Application component of TIBCO Software Inc.'s TIBCO EBX and TIBCO Product and Service Catalog powered by TIBCO EBX contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute a stored XSS… High Wed, 22 Feb 2023 00:00:00 GMT https://vulnogram.org/CVE-2022-41564 https://vulnogram.org/CVE-2022-41564 The Hawk Console component of TIBCO Software Inc.'s TIBCO Hawk and TIBCO Operational Intelligence Hawk RedTail contains a vulnerability that will return the EMS transport password and EMS SSL password to a privileged user. Affected releases are TIBCO… Medium Tue, 14 Feb 2023 00:00:00 GMT https://vulnogram.org/CVE-2022-41563 https://vulnogram.org/CVE-2022-41563 The Dashboard component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for AWS Marketplace, T… Critical Thu, 15 Dec 2022 03:44:03 GMT https://vulnogram.org/CVE-2022-41562 https://vulnogram.org/CVE-2022-41562 The HTML escaping component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AWS Marketplac… High Thu, 15 Dec 2022 03:44:03 GMT https://vulnogram.org/CVE-2022-41561 https://vulnogram.org/CVE-2022-41561 The JNDI Data Sources component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AWS Market… Critical Thu, 15 Dec 2022 03:44:03 GMT https://vulnogram.org/CVE-2022-41560 https://vulnogram.org/CVE-2022-41560 The Statement Set Upload via the Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute a Denial of Service Attack on the affected s… Medium Mon, 12 Dec 2022 01:49:10 GMT https://vulnogram.org/CVE-2022-41559 https://vulnogram.org/CVE-2022-41559 The Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains an easily exploitable vulnerability that allows an unauthenticated attacker with network access to exploit an open redirect on the affected system. A successful attack using this… Critical Network Exploitable Mon, 12 Dec 2022 01:49:10 GMT https://vulnogram.org/CVE-2022-41558 https://vulnogram.org/CVE-2022-41558 The Visualizations component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analyst, TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Desktop, TIBCO Spotfire Desktop, TIBCO Spotfire Deskto… Critical Tue, 15 Nov 2022 18:15:12 GMT https://vulnogram.org/CVE-2022-30578 https://vulnogram.org/CVE-2022-30578 The Web Server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute Stored Cross Site Scripting (XSS) on the affected system. A successf… High Wed, 21 Sep 2022 17:55:09 GMT https://vulnogram.org/CVE-2022-30577 https://vulnogram.org/CVE-2022-30577 The Web Server component of TIBCO Software Inc.'s TIBCO EBX contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute Stored Cross Site Scripting (XSS) on the affected system. A successful attac… High Wed, 21 Sep 2022 17:55:08 GMT https://vulnogram.org/CVE-2022-30579 https://vulnogram.org/CVE-2022-30579 The Web Player component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains a difficult to exploit vulnerability that allows a low privileged attacker with network access to execute blind… High Tue, 20 Sep 2022 18:55:08 GMT https://vulnogram.org/CVE-2022-30576 https://vulnogram.org/CVE-2022-30576 The Web Console component of TIBCO Software Inc.'s TIBCO Data Science - Workbench, TIBCO Statistica, TIBCO Statistica - Estore Edition, and TIBCO Statistica Trial contains an easily exploitable vulnerability that allows a low privileged attacker with… High Tue, 16 Aug 2022 17:55:23 GMT https://vulnogram.org/CVE-2022-30575 https://vulnogram.org/CVE-2022-30575 The Web Console component of TIBCO Software Inc.'s TIBCO Data Science - Workbench, TIBCO Statistica, TIBCO Statistica - Estore Edition, and TIBCO Statistica Trial contains easily exploitable Reflected Cross Site Scripting (XSS) vulnerabilities that a… High Tue, 16 Aug 2022 17:55:10 GMT https://vulnogram.org/CVE-2022-30574 https://vulnogram.org/CVE-2022-30574 The ftlserver component of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, TIBCO FTL - Enterprise Edition, TIBCO FTL - Enterprise Edition, TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, TIBCO eFTL… Medium Tue, 09 Aug 2022 17:20:16 GMT https://vulnogram.org/CVE-2022-30573 https://vulnogram.org/CVE-2022-30573 The ftlserver component of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, TIBCO FTL - Enterprise Edition, and TIBCO FTL - Enterprise Edition contains an easily exploitable vulnerability that allows a low privilege… Medium Tue, 09 Aug 2022 17:20:11 GMT https://vulnogram.org/CVE-2022-30572 https://vulnogram.org/CVE-2022-30572 The iWay Service Manager Console component of TIBCO Software Inc.'s TIBCO iWay Service Manager contains an easily exploitable Directory Traversal vulnerability that allows a low privileged attacker with network access to read arbitrary resources on t… Medium Tue, 02 Aug 2022 16:50:15 GMT https://vulnogram.org/CVE-2022-30571 https://vulnogram.org/CVE-2022-30571 The iWay Service Manager Console component of TIBCO Software Inc.'s TIBCO iWay Service Manager contains easily exploitable Reflected Cross Site Scripting (XSS) vulnerabilities that allow a low privileged attacker with network access to execute script… High Tue, 02 Aug 2022 16:50:10 GMT https://vulnogram.org/CVE-2022-30570 https://vulnogram.org/CVE-2022-30570 The Column Based Security component of TIBCO Software Inc.'s TIBCO Data Virtualization and TIBCO Data Virtualization for AWS Marketplace contains an easily exploitable vulnerability that allows a low privileged attacker with network access to obtain… Medium Tue, 19 Jul 2022 17:50:10 GMT https://vulnogram.org/CVE-2022-22778 https://vulnogram.org/CVE-2022-22778 The Web Server component of TIBCO Software Inc.'s TIBCO BusinessConnect Trading Community Management contains an easily exploitable vulnerability that allows an unauthenticated attacker with network access to execute Cross-Site Request Forgery (CSRF)… High Network Exploitable Wed, 18 May 2022 17:00:19 GMT https://vulnogram.org/CVE-2022-22777 https://vulnogram.org/CVE-2022-22777 The Web Server component of TIBCO Software Inc.'s TIBCO BusinessConnect Trading Community Management contains easily exploitable Reflected Cross Site Scripting (XSS) vulnerabilities that allow an unauthenticated attacker with network access to execut… Medium Network Exploitable Wed, 18 May 2022 17:00:17 GMT