# cve.now: Tibco Software Inc.

The newest entries naming Tibco Software Inc. as an affected vendor (up to 200), of 163 in all, 2 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2025-2261](https://cve.now/CVE-2025-2261.md): TIBCO BPM Enterprise XSS Vulnerability (CVSS 7.0)
- [CVE-2025-3751](https://cve.now/CVE-2025-3751.md): TIBCO ActiveMatrix BusinessWorks SQL Injection Vulnerability (CVSS 7.0)
- [CVE-2024-10218](https://cve.now/CVE-2024-10218.md): TIBCO Hawk Stored-XEE Vulnerability (CVSS 9.2)
- [CVE-2024-10217](https://cve.now/CVE-2024-10217.md): TIBCO Hawk Stored-XSS Vulnerability (CVSS 9.2)
- [CVE-2024-1137](https://cve.now/CVE-2024-1137.md): TIBCO ActiveSpaces Information Leak Vulnerability (CVSS 4.3)
- [CVE-2024-1138](https://cve.now/CVE-2024-1138.md): TIBCO FTL Privilege Escalation (CVSS 8.8)
- [CVE-2023-26222](https://cve.now/CVE-2023-26222.md): TIBCO EBX Cross-site Scripting (XXS) Vulnerability (CVSS 8.7)
- [CVE-2023-26221](https://cve.now/CVE-2023-26221.md): TIBCO Spotfire Insufficiently Protected Credential vulnerability (CVSS 5.0)
- [CVE-2023-26219](https://cve.now/CVE-2023-26219.md): TIBCO Operational Intelligence Hawk RedTail Credential Exposure Vulnerability (CVSS 7.4)
- [CVE-2023-26220](https://cve.now/CVE-2023-26220.md): TIBCO Spotfire Stored Cross-site Scripting (XSS) vulnerability (CVSS 5.4)
- [CVE-2023-26218](https://cve.now/CVE-2023-26218.md): TIBCO Nimbus Reflected Cross-site Scripting (XSS) vulnerabilities (CVSS 8.0)
- [CVE-2023-26217](https://cve.now/CVE-2023-26217.md): TIBCO EBX Add-ons SQL Injection Vulnerability (CVSS 8.8)
- [CVE-2023-26215](https://cve.now/CVE-2023-26215.md): TIBCO EBX® Add-ons Path Traversal (CVSS 7.7)
- [CVE-2023-26216](https://cve.now/CVE-2023-26216.md): TIBCO EBX Add-ons Arbitrary File Write (CVSS 9.1)
- [CVE-2023-29268](https://cve.now/CVE-2023-29268.md): TIBCO Spotfire Statistics Services Unrestricted File Upload Vulnerability (CVSS 9.8)
- [CVE-2023-26214](https://cve.now/CVE-2023-26214.md): TIBCO BusinessConnect Reflected XSS Vulnerability (CVSS 7.3)
- [CVE-2022-41567](https://cve.now/CVE-2022-41567.md): TIBCO BusinessConnect Stored XSS Vulnerability (CVSS 7.3)
- [CVE-2022-41566](https://cve.now/CVE-2022-41566.md): TIBCO EBX Add-ons Cross Site Scripting (XSS) Vulnerability (CVSS 8.7)
- [CVE-2022-41565](https://cve.now/CVE-2022-41565.md): TIBCO EBX Cross Site Scripting (XSS) Vulnerability (CVSS 8.7)
- [CVE-2022-41564](https://cve.now/CVE-2022-41564.md): TIBCO Operational Intelligence Hawk Redtail Credential Exposure Vulnerability (CVSS 6.8)
- [CVE-2022-41563](https://cve.now/CVE-2022-41563.md): TIBCO JasperReports Server Stored XSS Vulnerability (CVSS 9.0)
- [CVE-2022-41562](https://cve.now/CVE-2022-41562.md): TIBCO JasperReports Server XSS Issue on Roles (CVSS 8.4)
- [CVE-2022-41561](https://cve.now/CVE-2022-41561.md): TIBCO JasperReports Server RCE Vulnerability (CVSS 9.1)
- [CVE-2022-41560](https://cve.now/CVE-2022-41560.md): TIBCO Nimbus Denial of Service Vulnerability (CVSS 6.5)
- [CVE-2022-41559](https://cve.now/CVE-2022-41559.md): TIBCO Nimbus Open Redirect Vulnerability (CVSS 9.3)
- [CVE-2022-41558](https://cve.now/CVE-2022-41558.md): TIBCO Spotfire Stored Cross Site Scripting (XSS) Vulnerability (CVSS 9.0)
- [CVE-2022-30578](https://cve.now/CVE-2022-30578.md): TIBCO EBX Add-ons Stored XSS vulnerability (CVSS 8.0)
- [CVE-2022-30577](https://cve.now/CVE-2022-30577.md): TIBCO EBX Stored XSS vulnerability (CVSS 8.0)
- [CVE-2022-30579](https://cve.now/CVE-2022-30579.md): TIBCO Spotfire Server Blind SSRF vulnerability (CVSS 7.1)
- [CVE-2022-30576](https://cve.now/CVE-2022-30576.md): TIBCO Statistica Stored Cross Site Scripting (XSS) Vulnerability (CVSS 8.7)
- [CVE-2022-30575](https://cve.now/CVE-2022-30575.md): TIBCO Statistica Reflected Cross Site Scripting (XSS) Vulnerability (CVSS 7.3)
- [CVE-2022-30574](https://cve.now/CVE-2022-30574.md): TIBCO eFTL Secret Jacking (CVSS 4.6)
- [CVE-2022-30573](https://cve.now/CVE-2022-30573.md): TIBCO FTL Privilege Escalation (CVSS 6.7)
- [CVE-2022-30572](https://cve.now/CVE-2022-30572.md): TIBCO iWay Service Manager Directory Traversal Vulnerability (CVSS 6.5)
- [CVE-2022-30571](https://cve.now/CVE-2022-30571.md): TIBCO iWay Service Manager Reflected Cross Site Scripting (XSS) Vulnerability (CVSS 8.1)
- [CVE-2022-30570](https://cve.now/CVE-2022-30570.md): TIBCO Data Virtualization Access Control Vulnerability (CVSS 6.5)
- [CVE-2022-22778](https://cve.now/CVE-2022-22778.md): TIBCO BusinessConnect Trading Community Management Cross-Site Request Forgery Vulnerability (CVSS 8.8)
- [CVE-2022-22777](https://cve.now/CVE-2022-22777.md): TIBCO BusinessConnect Trading Community Management Reflected Cross Site Scripting Vulnerability (CVSS 6.1)
- [CVE-2022-22776](https://cve.now/CVE-2022-22776.md): TIBCO BusinessConnect Trading Community Management Stored Cross Site Scripting Vulnerability (CVSS 8.0)
- [CVE-2022-22775](https://cve.now/CVE-2022-22775.md): TIBCO ActiveMatrix BPM Reflected Cross Site Scripting (XSS) vulnerability (CVSS 8.1)
- [CVE-2022-22773](https://cve.now/CVE-2022-22773.md): TIBCO JasperReports Server Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.7)
- [CVE-2022-22774](https://cve.now/CVE-2022-22774.md): TIBCO Managed File Transfer Command Center XXE Vulnerability (CVSS 8.6)
- [CVE-2022-22772](https://cve.now/CVE-2022-22772.md): TIBCO Managed File Transfer Platform Server Remote Code Execution Vulnerability (CVSS 8.5)
- [CVE-2022-22771](https://cve.now/CVE-2022-22771.md): TIBCO JasperReports Library Directory Traversal Vulnerability (CVSS 9.9)
- [CVE-2022-22770](https://cve.now/CVE-2022-22770.md): TIBCO AuditSafe API Authentication vulnerability (CVSS 9.8)
- [CVE-2021-43050](https://cve.now/CVE-2021-43050.md): TIBCO BusinessConnect Container Edition administrative username and passwords leakage (CVSS 8.4)
- [CVE-2021-43049](https://cve.now/CVE-2021-43049.md): TIBCO BusinessConnect Container Edition username and password leakage (CVSS 9.8)
- [CVE-2022-22769](https://cve.now/CVE-2022-22769.md): TIBCO EBX vulnerabilities (CVSS 8.0)
- [CVE-2021-35500](https://cve.now/CVE-2021-35500.md): TIBCO Data Virtualization Arbitrary File Download vulnerability (CVSS 6.3)
- [CVE-2021-43055](https://cve.now/CVE-2021-43055.md): TIBCO eFTL Token Caching Vulnerability (CVSS 5.9)
- [CVE-2021-43054](https://cve.now/CVE-2021-43054.md): TIBCO eFTL Token Generation Vulnerability (CVSS 7.1)
- [CVE-2021-43053](https://cve.now/CVE-2021-43053.md): TIBCO FTL Secret Exposure Vulnerability (CVSS 8.5)
- [CVE-2021-43052](https://cve.now/CVE-2021-43052.md): TIBCO FTL Secret Generation Vulnerability (CVSS 9.3)
- [CVE-2021-43051](https://cve.now/CVE-2021-43051.md): TIBCO Spotfire Server API Authorization Vulnerability (CVSS 7.1)
- [CVE-2021-43048](https://cve.now/CVE-2021-43048.md): TIBCO PartnerExpress Click-Jacking vulnerability (CVSS 9.8)
- [CVE-2021-43047](https://cve.now/CVE-2021-43047.md): TIBCO PartnerExpress Cross Site Scripting vulnerabilities (CVSS 9.0)
- [CVE-2021-43046](https://cve.now/CVE-2021-43046.md): TIBCO PartnerExpress Session Token in URL (CVSS 7.5)
- [CVE-2021-35499](https://cve.now/CVE-2021-35499.md): TIBCO Nimbus Stored Cross-site Scripting (XSS) vulnerabilities (CVSS 8.0)
- [CVE-2021-35498](https://cve.now/CVE-2021-35498.md): TIBCO EBX Insecure Login Mechanism (CVSS 9.8)
- [CVE-2021-35496](https://cve.now/CVE-2021-35496.md): TIBCO JasperReports XML Eternal Entity (XXE) vulnerability (CVSS 7.5)
- [CVE-2021-35495](https://cve.now/CVE-2021-35495.md): TIBCO JasperReports FTP Password exposed (CVSS 9.0)
- [CVE-2021-35494](https://cve.now/CVE-2021-35494.md): TIBCO JasperReports unauthorized access to temporary object (CVSS 5.7)
- [CVE-2021-35497](https://cve.now/CVE-2021-35497.md): TIBCO FTL unvalidated SAN in client certificates (CVSS 7.5)
- [CVE-2021-35493](https://cve.now/CVE-2021-35493.md): TIBCO WebFOCUS Cross Site Scripting vulnerabilities (CVSS 9.0)
- [CVE-2021-28830](https://cve.now/CVE-2021-28830.md): TIBCO Spotfire Windows Platform Artifact Search vulnerability (CVSS 8.8)
- [CVE-2021-23275](https://cve.now/CVE-2021-23275.md): TIBCO Spotfire Windows Platform Installation vulnerability (CVSS 8.8)
- [CVE-2021-28829](https://cve.now/CVE-2021-28829.md): TIBCO Administrator CSV injection vulnerability (CVSS 6.5)
- [CVE-2021-28828](https://cve.now/CVE-2021-28828.md): TIBCO Administrator SQL injection vulnerability (CVSS 7.6)
- [CVE-2021-28827](https://cve.now/CVE-2021-28827.md): TIBCO Administrator Stored Cross Site Scripting vulnerability (CVSS 9.6)
- [CVE-2021-28826](https://cve.now/CVE-2021-28826.md): TIBCO Messaging - Eclipse Mosquitto Distribution - Bridge Windows Platform Installation vulnerability (CVSS 8.8)
- [CVE-2021-28825](https://cve.now/CVE-2021-28825.md): TIBCO Messaging - Eclipse Mosquitto Distribution - Core Windows Platform Installation vulnerability (CVSS 8.8)
- [CVE-2021-28824](https://cve.now/CVE-2021-28824.md): TIBCO ActiveSpaces Windows Platform Installation vulnerability (CVSS 8.8)
- [CVE-2021-28823](https://cve.now/CVE-2021-28823.md): TIBCO eFTL Windows Platform Installation vulnerability (CVSS 8.8)
- [CVE-2021-28822](https://cve.now/CVE-2021-28822.md): TIBCO Enterprise Message Service Windows Platform Artifact Search vulnerability (CVSS 8.8)
- [CVE-2021-28821](https://cve.now/CVE-2021-28821.md): TIBCO Enterprise Message Service Windows Platform Installation vulnerability (CVSS 8.8)
- [CVE-2021-28820](https://cve.now/CVE-2021-28820.md): TIBCO FTL Windows Platform Artifact Search vulnerability (CVSS 8.8)
- [CVE-2021-28819](https://cve.now/CVE-2021-28819.md): TIBCO FTL Windows Platform Installation vulnerability (CVSS 8.8)
- [CVE-2021-28818](https://cve.now/CVE-2021-28818.md): TIBCO Rendezvous Windows Platform Artifact Search vulnerability (CVSS 8.8)
- [CVE-2021-28817](https://cve.now/CVE-2021-28817.md): TIBCO Rendezvous Windows Platform Installation vulnerability (CVSS 8.8)
- [CVE-2021-23274](https://cve.now/CVE-2021-23274.md): TIBCO API Exchange Gateway Clickjack Vulnerability (CVSS 9.8)
- [CVE-2021-23273](https://cve.now/CVE-2021-23273.md): TIBCO Spotfire Cross Site Scripting Vulnerability (CVSS 8.0)
- [CVE-2021-23271](https://cve.now/CVE-2021-23271.md): TIBCO EBX Cross Site Scripting (XSS) (CVSS 8.0)
- [CVE-2021-23272](https://cve.now/CVE-2021-23272.md): TIBCO BPM Cross Site Scripting (XSS) (CVSS 4.6)
- [CVE-2020-27148](https://cve.now/CVE-2020-27148.md): TIBCO EBX EXML External Entity (CVSS 7.1)
- [CVE-2020-27147](https://cve.now/CVE-2020-27147.md): TIBCO PartnerExpress REST API (CVSS 6.5)
- [CVE-2020-27146](https://cve.now/CVE-2020-27146.md): TIBCO iProcess Workspace Browser CSRF (CVSS 5.0)
- [CVE-2020-9417](https://cve.now/CVE-2020-9417.md): TIBCO Foresight SQL Injection (CVSS 7.6)
- [CVE-2020-9416](https://cve.now/CVE-2020-9416.md): TIBCO Spotfire Stored Cross Site Scripting Vulnerability (CVSS 8.2)
- [CVE-2020-9415](https://cve.now/CVE-2020-9415.md): TIBCO Data Virtualization (CVSS 5.3)
- [CVE-2019-17339](https://cve.now/CVE-2019-17339.md): TIBCO Silver Fabric XSS vulerability (CVSS 6.8)
- [CVE-2020-9414](https://cve.now/CVE-2020-9414.md): TIBCO Managed File Transfer reflected XSS vulerability (CVSS 8.8)
- [CVE-2020-9413](https://cve.now/CVE-2020-9413.md): TIBCO Managed File Transfer reflected XSS vulerability (CVSS 6.3)
- [CVE-2020-9412](https://cve.now/CVE-2020-9412.md): TIBCO Managed File Transfer Platform Server for IBM i Arbitrary Command Execution (CVSS 10.0)
- [CVE-2020-9411](https://cve.now/CVE-2020-9411.md): TIBCO Managed File Transfer Platform Server for IBM i Authentication Bypass (CVSS 10.0)
- [CVE-2020-9410](https://cve.now/CVE-2020-9410.md): TIBCO JasperReports Library (CVSS 7.3)
- [CVE-2020-9409](https://cve.now/CVE-2020-9409.md): TIBCO JasperReports Server Fails To Enforce Access Restrictions (CVSS 9.8)
- [CVE-2020-9408](https://cve.now/CVE-2020-9408.md): TIBCO Spotfire Server Script Trust Problem Exposes Remote Code Execution Vulnerability (CVSS 9.9)
- [CVE-2019-17333](https://cve.now/CVE-2019-17333.md): TIBCO EBX Exposes Cross-Site Scripting Vulnerability (CVSS 8.0)
- [CVE-2019-17338](https://cve.now/CVE-2019-17338.md): TIBCO Patterns - Search Exposes Cross Site Scripting Vulnerabilities (CVSS 7.3)
- [CVE-2019-17337](https://cve.now/CVE-2019-17337.md): TIBCO Spotfire Server Library Vulnerable to Reflected Cross-Site Scripting (CVSS 8.1)
- [CVE-2019-17336](https://cve.now/CVE-2019-17336.md): TIBCO Spotfire Web Player Potentially Exposes Credentials For Shared Data Sources (CVSS 7.7)
- [CVE-2019-17335](https://cve.now/CVE-2019-17335.md): TIBCO Spotfire Server Exposes User-Specific Cached Data To Others Users (CVSS 5.3)
- [CVE-2019-17334](https://cve.now/CVE-2019-17334.md): TIBCO Spotfire Analyst and Desktop Remote Code Execution Via Shared Files (CVSS 7.6)
- [CVE-2019-17332](https://cve.now/CVE-2019-17332.md): TIBCO EBX Add-on For Digital Asset Manager Cross-Site Scripting Vulnerabilities (CVSS 7.3)
- [CVE-2019-17331](https://cve.now/CVE-2019-17331.md): TIBCO EBX Add-on For Data Exchange Cross-Site Scripting Vulnerabilities (CVSS 7.3)
- [CVE-2019-17330](https://cve.now/CVE-2019-17330.md): TIBCO EBX Exposes Multiple Cross-Site Scripting Vulnerabilities (CVSS 8.8)
- [CVE-2019-11212](https://cve.now/CVE-2019-11212.md): TIBCO MDM Exposes Cross-Site Scripting Vulnerabilities (CVSS 6.3)
- [CVE-2019-11211](https://cve.now/CVE-2019-11211.md): TIBCO Enterprise Runtime for R Server Running On Linux With Containerized TERR Service Vulnerable To Remote Code Execution (CVSS 9.9)
- [CVE-2019-11210](https://cve.now/CVE-2019-11210.md): TIBCO Enterprise Runtime for R Server Exposes Remote Code Execution (CVSS 10.0)
- [CVE-2019-11209](https://cve.now/CVE-2019-11209.md): TIBCO FTL Escalation Of Privileges for Realm Configuration (CVSS 8.8)
- [CVE-2019-11207](https://cve.now/CVE-2019-11207.md): TIBCO LogLogic Log Management Intelligence Multiple Cross-Site Scripting (XSS) and Cross-Site Request Forgery (CSRF) Vulnerabilities (CVSS 8.8)
- [CVE-2019-11208](https://cve.now/CVE-2019-11208.md): TIBCO API Exchange Processes OAuth Incorrectly (CVSS 6.4)
- [CVE-2019-11206](https://cve.now/CVE-2019-11206.md): TIBCO Spotfire Server Vulnerabilities With Integrity of Comments and Bookmarks (CVSS 4.3)
- [CVE-2019-11205](https://cve.now/CVE-2019-11205.md): TIBCO Spotfire Server Exposes Multiple Reflected Cross-Site Scripting Vulnerabilities (CVSS 8.8)
- [CVE-2019-11204](https://cve.now/CVE-2019-11204.md): TIBCO Spotfire Statistics Services Exposes Sensitive Files (CVSS 9.9)
- [CVE-2019-8995](https://cve.now/CVE-2019-8995.md): TIBCO ActiveMatrix BPM Open Redirect Vulnerability (CVSS 4.7)
- [CVE-2019-8994](https://cve.now/CVE-2019-8994.md): TIBCO ActiveMatrix BPM Escalation of Privileges Vulnerability (CVSS 5.4)
- [CVE-2019-8993](https://cve.now/CVE-2019-8993.md): TIBCO Active Matrix Service Grid Administrator Unauthenticated Download of Sensitive File (CVSS 8.6)
- [CVE-2019-8992](https://cve.now/CVE-2019-8992.md): TIBCO Active Matrix Service Grid Administrator Remote Code Execution (CVSS 9.9)
- [CVE-2019-8991](https://cve.now/CVE-2019-8991.md): TIBCO Active Matrix Service Grid Administrator With Multiple Cross-Site Scripting and Cross-Site Request Forgery Vulnerabilities (CVSS 8.8)
- [CVE-2019-11203](https://cve.now/CVE-2019-11203.md): TIBCO ActiveMatrix BPM Cross-Site Scripting and Cross-Site Request Forgery Vulnerabilities (CVSS 8.8)
- [CVE-2019-8990](https://cve.now/CVE-2019-8990.md): TIBCO ActiveMatrix BusinessWorks Fails To Properly Enforce Authentication (CVSS 9.1)
- [CVE-2019-8989](https://cve.now/CVE-2019-8989.md): TIBCO Spotfire Data Science Spoofing Vulnerability (CVSS 5.0)
- [CVE-2019-8988](https://cve.now/CVE-2019-8988.md): TIBCO Spotfire Data Science Privilege Escalation Vulnerability (CVSS 6.5)
- [CVE-2019-8987](https://cve.now/CVE-2019-8987.md): TIBCO Spotfire Data Science Vulnerable to Persistent Cross-Site Scripting (CVSS 7.6)
- [CVE-2019-8986](https://cve.now/CVE-2019-8986.md): TIBCO JasperReports Server XML Entity Expansion Vulnerability (CVSS 7.7)
- [CVE-2018-18816](https://cve.now/CVE-2018-18816.md): TIBCO JasperReports Persistent Cross Site Scripting Vulnerability (CVSS 8.0)
- [CVE-2018-18815](https://cve.now/CVE-2018-18815.md): TIBCO JasperReports Server User Information Disclosure (CVSS 10.0)
- [CVE-2018-18809](https://cve.now/CVE-2018-18809.md): TIBCO JasperReports Library Directory Traversal Vulnerability (CVSS 9.9, KEV)
- [CVE-2018-18808](https://cve.now/CVE-2018-18808.md): TIBCO JasperReports Server Privilege Escalation Via Race Condition (CVSS 8.8)
- [CVE-2018-18814](https://cve.now/CVE-2018-18814.md): TIBCO Spotfire Authentication Vulnerability (CVSS 8.8)
- [CVE-2018-18813](https://cve.now/CVE-2018-18813.md): TIBCO Spotfire Reflected and Persistent Cross-Site Scripting Vulnerabilities (CVSS 8.8)
- [CVE-2018-18812](https://cve.now/CVE-2018-18812.md): TIBCO Spotfire Fails To Prevent Write Access to Spotfire Library (CVSS 6.5)
- [CVE-2018-18810](https://cve.now/CVE-2018-18810.md): TIBCO Managed File Transfer Credentials Disclosure (CVSS 6.8)
- [CVE-2018-18807](https://cve.now/CVE-2018-18807.md): TIBCO Statistica Server Vulnerable to Cross Site Scripting (CVSS 7.6)
- [CVE-2018-12416](https://cve.now/CVE-2018-12416.md): TIBCO DataSynapse GridServer Manager Component Vulnerable to Cross-Site Request Forgery (CVSS 7.1)
- [CVE-2018-12415](https://cve.now/CVE-2018-12415.md): TIBCO Enterprise Message Service Vulnerable to CSRF Attacks (CVSS 7.5)
- [CVE-2018-12414](https://cve.now/CVE-2018-12414.md): TIBCO Rendezvous Vulnerable to CSRF Attacks (CVSS 7.5)
- [CVE-2018-12413](https://cve.now/CVE-2018-12413.md): TIBCO Messaging - Apache Kafka Distribution - Schema Repository Vulnerable to CSRF Attacks (CVSS 7.5)
- [CVE-2018-12412](https://cve.now/CVE-2018-12412.md): TIBCO FTL Realm Server Vulnerable to CSRF Attacks (CVSS 7.5)
- [CVE-2018-12411](https://cve.now/CVE-2018-12411.md): TIBCO ActiveSpaces Administrative Daemon Vulnerable to CSRF Attacks (CVSS 7.5)
- [CVE-2018-12410](https://cve.now/CVE-2018-12410.md): TIBCO Spotfire Statistics Services remote execution vulnerabilities (CVSS 9.8)
- [CVE-2018-12408](https://cve.now/CVE-2018-12408.md): TIBCO ActiveMatrix BusinessWorks 5.X XML eXternal Entity Vulnerability (CVSS 7.5)
- [CVE-2018-5437](https://cve.now/CVE-2018-5437.md): TIBCO Spotfire Product Family Information Disclosure Vulnerability (CVSS 6.8)
- [CVE-2018-5436](https://cve.now/CVE-2018-5436.md): TIBCO Spotfire Server information disclosure vulnerabilities (CVSS 6.5)
- [CVE-2018-5435](https://cve.now/CVE-2018-5435.md): TIBCO Spotfire Product Family Remote Code Execution Vulnerability (CVSS 9.6)
- [CVE-2018-5428](https://cve.now/CVE-2018-5428.md): TIBCO Data Virtualization Command Injection Vulnerability (CVSS 8.8)
- [CVE-2018-5434](https://cve.now/CVE-2018-5434.md): XML eXternal Entity Expansion Vulnerabilities with TIBCO Runtime Agent (CVSS 5.8)
- [CVE-2018-5433](https://cve.now/CVE-2018-5433.md): XML eXternal Entity Expansion Vulnerabilities with TIBCO Administrator (CVSS 6.5)
- [CVE-2018-5432](https://cve.now/CVE-2018-5432.md): TIBCO Administrator - Enterprise Edition Cross-Site Scripting Vulnerability (CVSS 8.0)
- [CVE-2017-5536](https://cve.now/CVE-2017-5536.md): TIBCO DataSynapse GridServer manager component vulnerable to cross-site scripting attacks (CVSS 6.3)
- [CVE-2017-5535](https://cve.now/CVE-2017-5535.md): TIBCO DataSynapse GridServer improper use of encryption (CVSS 6.8)
- [CVE-2018-5431](https://cve.now/CVE-2018-5431.md): TIBCO JasperReports Server Cross Site Scripting Vulnerability (CVSS 6.3)
- [CVE-2018-5430](https://cve.now/CVE-2018-5430.md): TIBCO JasperReports Server Information Disclosure Vulnerability (CVSS 7.7, KEV)
- [CVE-2018-5429](https://cve.now/CVE-2018-5429.md): TIBCO JasperReports Library Code Sandboxing Problem (CVSS 8.8)
- [CVE-2017-5534](https://cve.now/CVE-2017-5534.md): Improper sandboxing of a third-party component in tibbr (CVSS 8.8)
- [CVE-2017-5530](https://cve.now/CVE-2017-5530.md): SAML protocol handling errors in tibbr (CVSS 8.1)
- [CVE-2017-5533](https://cve.now/CVE-2017-5533.md): TIBCO JasperReports Server credentials disclosure (CVSS 9.3)
- [CVE-2017-5532](https://cve.now/CVE-2017-5532.md): TIBCO JasperReports persistent cross site scripting (CVSS 5.4)
- [CVE-2017-5531](https://cve.now/CVE-2017-5531.md): Deployments of TIBCO Managed File Transfer Command Center versions 8.0.0 and 8.0.1 and TIBCO Managed File Transfer Internet Server versions (CVSS 8.0)
- [CVE-2017-5529](https://cve.now/CVE-2017-5529.md): TIBCO JasperReports Library Information Disclosure (CVSS 4.1)
- [CVE-2017-5528](https://cve.now/CVE-2017-5528.md): TIBCO JasperReports Server cross-site vulnerabilities (CVSS 5.7)
- [CVE-2017-5527](https://cve.now/CVE-2017-5527.md): TIBCO Spotfire injection vulnerabilities (CVSS 4.3)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/tibco-software
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.