Most recent entries from csaf_tibco

TIBCO-2023-454 — TIBCO Security Advisory TIBCO-2023-454

Tue, 23 May 2023 00:00:00 +0000

The component listed above contains an exploitable vulnerability that allows an attacker to upload files to a directory accessible by the web server.

TIBCO-2023-453 — TIBCO Security Advisory TIBCO-2023-453

Tue, 23 May 2023 00:00:00 +0000

The component listed above contains a vulnerability that allows an attacker with low-privileged application access to read system files that are accessible to the web server.

TIBCO-2023-460 — TIBCO Security Advisory TIBCO-2023-460

Tue, 18 Apr 2023 00:00:00 +0000

TIBCO Spotfire Statistics Services contains a vulnerability that allows an unauthenticated remote attacker to upload or modify arbitrary files within the web server directory on the affected system.

TIBCO-2023-450 — TIBCO Security Advisory TIBCO-2023-450

Wed, 22 Feb 2023 00:00:00 +0000

The component listed above contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute stored XSS on the affected system.

TIBCO-2023-446 — TIBCO Security Advisory TIBCO-2023-446

Wed, 22 Feb 2023 00:00:00 +0000

The component listed above contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute a stored XSS on the affected system.

TIBCO-2023-378 — TIBCO Security Advisory TIBCO-2023-378

Wed, 22 Feb 2023 00:00:00 +0000

The component listed above contains easily exploitable Reflected Cross Site Scripting (XSS) vulnerabilities that allow a low privileged attacker with network access to execute scripts targeting the affected system or the victim's local system. The component listed above contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute a cross-site scripting (XSS) attack on the affected system.

TIBCO-2023-270 — TIBCO Security Advisory TIBCO-2023-270

Tue, 14 Feb 2023 00:00:00 +0000

The component listed above contains a vulnerability that will return the EMS transport password and EMS SSL password to a privileged user.

TIBCO-2022-268 — TIBCO Security Advisory TIBCO-2022-268

Tue, 13 Dec 2022 17:00:00 +0000

The component listed above contains an easily exploitable vulnerability that allows a privileged/administrative attacker with network access to execute Remote Code Execution to obtain a reverse shell on the affected system. The component listed above contains an easily exploitable vulnerability that allows a privileged/administrative attacker with network access to execute an XSS attack on the affected system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. The component listed above contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute Stored Cross Site Scripting (XSS) on the affected system. A successful attack using this vulnerability requires human interaction from a person other than the attacker.

TIBCO-2022-272 — TIBCO Security Advisory TIBCO-2022-272

Tue, 06 Dec 2022 17:00:00 +0000

The component listed above contains an easily exploitable vulnerability that allows an unauthenticated attacker with network access to exploit an open redirect on the affected system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. The component listed above contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute a Denial of Service Attack on the affected system.

TIBCO-2022-337 — TIBCO Security Advisory TIBCO-2022-337

Tue, 15 Nov 2022 17:00:00 +0000

The component listed above contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute Stored Cross Site Scripting (XSS) on the affected system. A successful attack using this vulnerability requires human interaction from a person other than the attacker.