Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

TIBCO Software Inc. Security Vulnerabilities | CyStack CVE Database

Vulnerability	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2024-1137`TIBCO ActiveSpaces Information Leak Vulnerability	Exploitation statusNot known exploited	FixYes	Affected productTIBCO ActiveSpaces - Enterprise Edition	Published03/12/2024	SeverityMedium
`CVE-2024-1138`TIBCO FTL Privilege Escalation	Exploitation statusNot known exploited	FixYes	Affected productTIBCO FTL - Enterprise Edition	Published03/12/2024	SeverityHigh
`CVE-2023-26222`TIBCO EBX Cross-site Scripting (XXS) Vulnerability	Exploitation statusNot known exploited	FixYes	Affected productTIBCO EBX	Published11/14/2023	SeverityHigh
`CVE-2023-26221`TIBCO Spotfire Insufficiently Protected Credential vulnerability	Exploitation statusNot known exploited	FixYes	Affected productSpotfire Analyst	Published11/08/2023	SeverityMedium
`CVE-2023-26219`TIBCO Operational Intelligence Hawk RedTail Credential Exposure Vulnerability	Exploitation statusNot known exploited	FixYes	Affected productTIBCO Hawk	Published10/24/2023	SeverityHigh
`CVE-2023-26220`TIBCO Spotfire Stored Cross-site Scripting (XSS) vulnerability	Exploitation statusNot known exploited	FixYes	Affected productSpotfire Analyst	Published10/10/2023	SeverityMedium
`CVE-2023-26218`TIBCO Nimbus Reflected Cross-site Scripting (XSS) vulnerabilities	Exploitation statusNot known exploited	FixYes	Affected productTIBCO Nimbus	Published09/29/2023	SeverityHigh
`CVE-2023-26217`TIBCO EBX Add-ons SQL Injection Vulnerability	Exploitation statusNot known exploited	FixYes	Affected productTIBCO EBX Add-ons	Published07/19/2023	SeverityHigh
`CVE-2023-26215`TIBCO EBX® Add-ons Path Traversal	Exploitation statusNot known exploited	FixYes	Affected productTIBCO EBX Add-ons	Published05/25/2023	SeverityHigh
`CVE-2023-26216`TIBCO EBX Add-ons Arbitrary File Write	Exploitation statusNot known exploited	FixYes	Affected productTIBCO EBX Add-ons	Published05/25/2023	SeverityCritical
`CVE-2023-29268`TIBCO Spotfire Statistics Services Unrestricted File Upload Vulnerability	Exploitation statusNot known exploited	FixYes	Affected productTIBCO Spotfire Statistics Services	Published04/26/2023	SeverityCritical
`CVE-2022-41565`TIBCO EBX Cross Site Scripting (XSS) Vulnerability	Exploitation statusNot confirmed	FixYes	Affected productTIBCO EBX	Published02/22/2023	SeverityHigh
`CVE-2023-26214`TIBCO BusinessConnect Reflected XSS Vulnerability	Exploitation statusNot known exploited	FixYes	Affected productTIBCO BusinessConnect	Published02/22/2023	SeverityHigh
`CVE-2022-41566`TIBCO EBX Add-ons Cross Site Scripting (XSS) Vulnerability	Exploitation statusNot confirmed	FixYes	Affected productTIBCO EBX Add-ons	Published02/22/2023	SeverityHigh
`CVE-2022-41567`TIBCO BusinessConnect Stored XSS Vulnerability	Exploitation statusNot known exploited	FixYes	Affected productTIBCO BusinessConnect	Published02/22/2023	SeverityHigh
`CVE-2022-41564`TIBCO Operational Intelligence Hawk Redtail Credential Exposure Vulnerability	Exploitation statusNot known exploited	FixYes	Affected productTIBCO Hawk	Published02/14/2023	SeverityMedium
`CVE-2022-41563`TIBCO JasperReports Server Stored XSS Vulnerability	Exploitation statusNot confirmed	FixYes	Affected productTIBCO JasperReports Server	Published12/15/2022	SeverityCritical
`CVE-2022-41561`TIBCO JasperReports Server RCE Vulnerability	Exploitation statusNot confirmed	FixYes	Affected productTIBCO JasperReports Server	Published12/15/2022	SeverityCritical
`CVE-2022-41562`TIBCO JasperReports Server XSS Issue on Roles	Exploitation statusNot confirmed	FixYes	Affected productTIBCO JasperReports Server	Published12/15/2022	SeverityHigh
`CVE-2022-41560`TIBCO Nimbus Denial of Service Vulnerability	Exploitation statusNot known exploited	FixYes	Affected productTIBCO Nimbus	Published12/12/2022	SeverityMedium
`CVE-2022-41559`TIBCO Nimbus Open Redirect Vulnerability	Exploitation statusNot known exploited	FixYes	Affected productTIBCO Nimbus	Published12/12/2022	SeverityCritical
`CVE-2022-41558`TIBCO Spotfire Stored Cross Site Scripting (XSS) Vulnerability	Exploitation statusNot known exploited	FixYes	Affected productTIBCO Spotfire Analyst	Published11/15/2022	SeverityCritical
`CVE-2022-30578`TIBCO EBX Add-ons Stored XSS vulnerability	Exploitation statusNot known exploited	FixYes	Affected productTIBCO EBX Add-ons	Published09/21/2022	SeverityHigh
`CVE-2022-30577`TIBCO EBX Stored XSS vulnerability	Exploitation statusNot known exploited	FixYes	Affected productTIBCO EBX	Published09/21/2022	SeverityHigh
`CVE-2022-30579`TIBCO Spotfire Server Blind SSRF vulnerability	Exploitation statusNot known exploited	FixYes	Affected productTIBCO Spotfire Analytics Platform for AWS Marketplace	Published09/20/2022	SeverityHigh
`CVE-2022-30576`TIBCO Statistica Stored Cross Site Scripting (XSS) Vulnerability	Exploitation statusNot confirmed	FixYes	Affected productTIBCO Data Science - Workbench	Published08/16/2022	SeverityHigh
`CVE-2022-30575`TIBCO Statistica Reflected Cross Site Scripting (XSS) Vulnerability	Exploitation statusNot confirmed	FixYes	Affected productTIBCO Data Science - Workbench	Published08/16/2022	SeverityHigh
`CVE-2022-30574`TIBCO eFTL Secret Jacking	Exploitation statusNot confirmed	FixYes	Affected productTIBCO FTL - Community Edition	Published08/09/2022	SeverityMedium
`CVE-2022-30573`TIBCO FTL Privilege Escalation	Exploitation statusNot confirmed	FixYes	Affected productTIBCO FTL - Community Edition	Published08/09/2022	SeverityMedium
`CVE-2022-30572`TIBCO iWay Service Manager Directory Traversal Vulnerability	Exploitation statusNot confirmed	FixYes	Affected productTIBCO iWay Service Manager	Published08/02/2022	SeverityMedium
`CVE-2022-30571`TIBCO iWay Service Manager Reflected Cross Site Scripting (XSS) Vulnerability	Exploitation statusNot confirmed	FixYes	Affected productTIBCO iWay Service Manager	Published08/02/2022	SeverityHigh
`CVE-2022-30570`TIBCO Data Virtualization Access Control Vulnerability	Exploitation statusNot confirmed	FixYes	Affected productTIBCO Data Virtualization	Published07/19/2022	SeverityMedium
`CVE-2022-22778`TIBCO BusinessConnect Trading Community Management Cross-Site Request Forgery Vulnerability	Exploitation statusNot confirmed	FixYes	Affected productTIBCO BusinessConnect Trading Community Management	Published05/18/2022	SeverityHigh
`CVE-2022-22777`TIBCO BusinessConnect Trading Community Management Reflected Cross Site Scripting Vulnerability	Exploitation statusNot confirmed	FixYes	Affected productTIBCO BusinessConnect Trading Community Management	Published05/18/2022	SeverityMedium
`CVE-2022-22776`TIBCO BusinessConnect Trading Community Management Stored Cross Site Scripting Vulnerability	Exploitation statusNot confirmed	FixYes	Affected productTIBCO BusinessConnect Trading Community Management	Published05/18/2022	SeverityHigh
`CVE-2022-22775`TIBCO ActiveMatrix BPM Reflected Cross Site Scripting (XSS) vulnerability	Exploitation statusNot confirmed	FixYes	Affected productTIBCO BPM Enterprise	Published05/17/2022	SeverityHigh
`CVE-2022-22773`TIBCO JasperReports Server Reflected Cross Site Scripting (XSS) vulnerability	Exploitation statusNot confirmed	FixYes	Affected productTIBCO JasperReports Server	Published05/17/2022	SeverityHigh
`CVE-2022-22774`TIBCO Managed File Transfer Command Center XXE Vulnerability	Exploitation statusNot confirmed	FixYes	Affected productTIBCO Managed File Transfer Command Center	Published05/10/2022	SeverityHigh
`CVE-2022-22772`TIBCO Managed File Transfer Platform Server Remote Code Execution Vulnerability	Exploitation statusNot confirmed	FixYes	Affected productTIBCO Managed File Transfer Platform Server for UNIX	Published03/30/2022	SeverityHigh
`CVE-2022-22771`TIBCO JasperReports Library Directory Traversal Vulnerability	Exploitation statusNot confirmed	FixYes	Affected productTIBCO JasperReports Library	Published03/15/2022	SeverityCritical
`CVE-2022-22770`TIBCO AuditSafe API Authentication vulnerability	Exploitation statusNot confirmed	FixYes	Affected productTIBCO AuditSafe	Published02/15/2022	SeverityCritical
`CVE-2021-43050`TIBCO BusinessConnect Container Edition administrative username and passwords leakage	Exploitation statusNot confirmed	FixYes	Affected productTIBCO BusinessConnect Container Edition	Published02/15/2022	SeverityHigh
`CVE-2021-43049`TIBCO BusinessConnect Container Edition username and password leakage	Exploitation statusNot confirmed	FixYes	Affected productTIBCO BusinessConnect Container Edition	Published02/15/2022	SeverityCritical
`CVE-2022-22769`TIBCO EBX vulnerabilities	Exploitation statusNot confirmed	FixYes	Affected productTIBCO EBX	Published01/19/2022	SeverityHigh
`CVE-2021-35500`TIBCO Data Virtualization Arbitrary File Download vulnerability	Exploitation statusNot confirmed	FixYes	Affected productTIBCO Data Virtualization	Published01/12/2022	SeverityMedium
`CVE-2021-43055`TIBCO eFTL Token Caching Vulnerability	Exploitation statusNot confirmed	FixYes	Affected productTIBCO eFTL - Community Edition	Published01/11/2022	SeverityMedium
`CVE-2021-43054`TIBCO eFTL Token Generation Vulnerability	Exploitation statusNot confirmed	FixYes	Affected productTIBCO eFTL - Community Edition	Published01/11/2022	SeverityHigh
`CVE-2021-43053`TIBCO FTL Secret Exposure Vulnerability	Exploitation statusNot confirmed	FixYes	Affected productTIBCO FTL - Community Edition	Published01/11/2022	SeverityHigh
`CVE-2021-43052`TIBCO FTL Secret Generation Vulnerability	Exploitation statusNot confirmed	FixYes	Affected productTIBCO FTL - Community Edition	Published01/11/2022	SeverityCritical
`CVE-2021-43051`TIBCO Spotfire Server API Authorization Vulnerability	Exploitation statusNot confirmed	FixYes	Affected productTIBCO Spotfire Server	Published12/14/2021	SeverityHigh
`CVE-2021-43048`TIBCO PartnerExpress Click-Jacking vulnerability	Exploitation statusNot confirmed	FixYes	Affected productTIBCO PartnerExpress	Published11/16/2021	SeverityCritical
`CVE-2021-43047`TIBCO PartnerExpress Cross Site Scripting vulnerabilities	Exploitation statusNot confirmed	FixYes	Affected productTIBCO PartnerExpress	Published11/16/2021	SeverityCritical
`CVE-2021-43046`TIBCO PartnerExpress Session Token in URL	Exploitation statusNot confirmed	FixYes	Affected productTIBCO PartnerExpress	Published11/16/2021	SeverityHigh
`CVE-2021-35499`TIBCO Nimbus Stored Cross-site Scripting (XSS) vulnerabilities	Exploitation statusNot confirmed	FixYes	Affected productTIBCO Nimbus	Published10/26/2021	SeverityHigh
`CVE-2021-35498`TIBCO EBX Insecure Login Mechanism	Exploitation statusNot confirmed	FixYes	Affected productTIBCO EBX	Published10/13/2021	SeverityCritical
`CVE-2021-35496`TIBCO JasperReports XML Eternal Entity (XXE) vulnerability	Exploitation statusNot confirmed	FixYes	Affected productTIBCO JasperReports Server	Published10/12/2021	SeverityHigh
`CVE-2021-35495`TIBCO JasperReports FTP Password exposed	Exploitation statusNot confirmed	FixYes	Affected productTIBCO JasperReports Server	Published10/12/2021	SeverityCritical
`CVE-2021-35494`TIBCO JasperReports unauthorized access to temporary object	Exploitation statusNot confirmed	FixYes	Affected productTIBCO JasperReports Server	Published10/12/2021	SeverityMedium
`CVE-2021-35497`TIBCO FTL unvalidated SAN in client certificates	Exploitation statusNot confirmed	FixYes	Affected productTIBCO ActiveSpaces - Community Edition	Published10/05/2021	SeverityHigh
`CVE-2021-35493`TIBCO WebFOCUS Cross Site Scripting vulnerabilities	Exploitation statusNot confirmed	FixYes	Affected productTIBCO WebFOCUS Client	Published09/14/2021	SeverityCritical
`CVE-2021-28830`TIBCO Spotfire Windows Platform Artifact Search vulnerability	Exploitation statusNot confirmed	FixYes	Affected productTIBCO Enterprise Runtime for R - Server Edition	Published06/29/2021	SeverityHigh
`CVE-2021-23275`TIBCO Spotfire Windows Platform Installation vulnerability	Exploitation statusNot confirmed	FixYes	Affected productTIBCO Enterprise Runtime for R - Server Edition	Published06/29/2021	SeverityHigh
`CVE-2021-28829`TIBCO Administrator CSV injection vulnerability	Exploitation statusNot confirmed	FixYes	Affected productTIBCO Administrator - Enterprise Edition	Published04/20/2021	SeverityMedium
`CVE-2021-28828`TIBCO Administrator SQL injection vulnerability	Exploitation statusNot confirmed	FixYes	Affected productTIBCO Administrator - Enterprise Edition	Published04/20/2021	SeverityHigh
`CVE-2021-28827`TIBCO Administrator Stored Cross Site Scripting vulnerability	Exploitation statusNot confirmed	FixYes	Affected productTIBCO Administrator - Enterprise Edition	Published04/20/2021	SeverityCritical
`CVE-2021-28826`TIBCO Messaging - Eclipse Mosquitto Distribution - Bridge Windows Platform Installation vulnerability	Exploitation statusNot confirmed	FixYes	Affected productTIBCO Messaging - Eclipse Mosquitto Distribution - Bridge - Community Edition	Published04/14/2021	SeverityHigh
`CVE-2021-28825`TIBCO Messaging - Eclipse Mosquitto Distribution - Core Windows Platform Installation vulnerability	Exploitation statusNot confirmed	FixYes	Affected productTIBCO Messaging - Eclipse Mosquitto Distribution - Core - Community Edition	Published04/14/2021	SeverityHigh
`CVE-2021-28824`TIBCO ActiveSpaces Windows Platform Installation vulnerability	Exploitation statusNot confirmed	FixYes	Affected productTIBCO ActiveSpaces - Community Edition	Published03/23/2021	SeverityHigh
`CVE-2021-28823`TIBCO eFTL Windows Platform Installation vulnerability	Exploitation statusNot confirmed	FixYes	Affected productTIBCO eFTL - Community Edition	Published03/23/2021	SeverityHigh
`CVE-2021-28822`TIBCO Enterprise Message Service Windows Platform Artifact Search vulnerability	Exploitation statusNot confirmed	FixYes	Affected productTIBCO Enterprise Message Service	Published03/23/2021	SeverityHigh
`CVE-2021-28821`TIBCO Enterprise Message Service Windows Platform Installation vulnerability	Exploitation statusNot confirmed	FixYes	Affected productTIBCO Enterprise Message Service	Published03/23/2021	SeverityHigh
`CVE-2021-28820`TIBCO FTL Windows Platform Artifact Search vulnerability	Exploitation statusNot confirmed	FixYes	Affected productTIBCO FTL - Community Edition	Published03/23/2021	SeverityHigh
`CVE-2021-28819`TIBCO FTL Windows Platform Installation vulnerability	Exploitation statusNot confirmed	FixYes	Affected productTIBCO FTL - Community Edition	Published03/23/2021	SeverityHigh
`CVE-2021-28818`TIBCO Rendezvous Windows Platform Artifact Search vulnerability	Exploitation statusNot confirmed	FixYes	Affected productTIBCO Rendezvous	Published03/23/2021	SeverityHigh
`CVE-2021-28817`TIBCO Rendezvous Windows Platform Installation vulnerability	Exploitation statusNot confirmed	FixYes	Affected productTIBCO Rendezvous	Published03/23/2021	SeverityHigh
`CVE-2021-23274`TIBCO API Exchange Gateway Clickjack Vulnerability	Exploitation statusNot confirmed	FixYes	Affected productTIBCO API Exchange Gateway	Published03/23/2021	SeverityCritical
`CVE-2021-23273`TIBCO Spotfire Cross Site Scripting Vulnerability	Exploitation statusNot confirmed	FixYes	Affected productTIBCO Spotfire Analyst	Published03/09/2021	SeverityHigh
`CVE-2021-23271`TIBCO EBX Cross Site Scripting (XSS)	Exploitation statusNot confirmed	FixYes	Affected productTIBCO EBX	Published02/02/2021	SeverityHigh
`CVE-2021-23272`TIBCO BPM Cross Site Scripting (XSS)	Exploitation statusNot confirmed	FixYes	Affected productTIBCO BPM Enterprise	Published01/26/2021	SeverityMedium
`CVE-2020-27148`TIBCO EBX EXML External Entity	Exploitation statusNot confirmed	FixYes	Affected productTIBCO EBX Add-ons	Published01/12/2021	SeverityHigh
`CVE-2020-27147`TIBCO PartnerExpress REST API	Exploitation statusNot confirmed	FixYes	Affected productTIBCO PartnerExpress	Published12/15/2020	SeverityMedium
`CVE-2020-27146`TIBCO iProcess Workspace Browser CSRF	Exploitation statusNot confirmed	FixYes	Affected productTIBCO iProcess Workspace (Browser)	Published11/10/2020	SeverityMedium
`CVE-2020-9417`TIBCO Foresight SQL Injection	Exploitation statusNot confirmed	FixYes	Affected productTIBCO Foresight Archive and Retrieval System	Published10/20/2020	SeverityHigh
`CVE-2020-9416`TIBCO Spotfire Stored Cross Site Scripting Vulnerability	Exploitation statusNot confirmed	FixYes	Affected productTIBCO Spotfire Analyst	Published09/15/2020	SeverityHigh
`CVE-2020-9415`TIBCO Data Virtualization	Exploitation statusNot confirmed	FixYes	Affected productTIBCO Data Virtualization	Published08/18/2020	SeverityMedium
`CVE-2019-17339`TIBCO Silver Fabric XSS vulerability	Exploitation statusNot confirmed	FixYes	Affected productTIBCO Silver Fabric	Published08/11/2020	SeverityMedium
`CVE-2020-9414`TIBCO Managed File Transfer reflected XSS vulerability	Exploitation statusNot confirmed	FixYes	Affected productTIBCO Managed File Transfer Command Center	Published06/30/2020	SeverityHigh
`CVE-2020-9413`TIBCO Managed File Transfer reflected XSS vulerability	Exploitation statusNot confirmed	FixYes	Affected productTIBCO Managed File Transfer Command Center	Published06/30/2020	SeverityMedium
`CVE-2020-9412`TIBCO Managed File Transfer Platform Server for IBM i Arbitrary Command Execution	Exploitation statusNot confirmed	FixYes	Affected productTIBCO Managed File Transfer Platform Server for IBM i	Published06/09/2020	SeverityCritical
`CVE-2020-9411`TIBCO Managed File Transfer Platform Server for IBM i Authentication Bypass	Exploitation statusNot confirmed	FixYes	Affected productTIBCO Managed File Transfer Platform Server for IBM i	Published06/09/2020	SeverityCritical
`CVE-2020-9410`TIBCO JasperReports Library	Exploitation statusNot confirmed	FixYes	Affected productTIBCO JasperReports Library	Published05/20/2020	SeverityHigh
`CVE-2020-9409`TIBCO JasperReports Server Fails To Enforce Access Restrictions	Exploitation statusNot confirmed	FixYes	Affected productTIBCO JasperReports Server	Published05/20/2020	SeverityCritical
`CVE-2020-9408`TIBCO Spotfire Server Script Trust Problem Exposes Remote Code Execution Vulnerability	Exploitation statusNot confirmed	FixYes	Affected productTIBCO Spotfire Analytics Platform for AWS Marketplace	Published03/11/2020	SeverityCritical
`CVE-2019-17333`TIBCO EBX Exposes Cross-Site Scripting Vulnerability	Exploitation statusNot confirmed	FixYes	Affected productTIBCO EBX	Published02/19/2020	SeverityHigh
`CVE-2019-17338`TIBCO Patterns - Search Exposes Cross Site Scripting Vulnerabilities	Exploitation statusNot confirmed	FixYes	Affected productTIBCO Patterns - Search	Published01/28/2020	SeverityHigh
`CVE-2019-17337`TIBCO Spotfire Server Library Vulnerable to Reflected Cross-Site Scripting	Exploitation statusNot confirmed	FixYes	Affected productTIBCO Spotfire Analytics Platform for AWS Marketplace	Published12/17/2019	SeverityHigh
`CVE-2019-17336`TIBCO Spotfire Web Player Potentially Exposes Credentials For Shared Data Sources	Exploitation statusNot confirmed	FixYes	Affected productTIBCO Spotfire Analytics Platform for AWS Marketplace	Published12/17/2019	SeverityHigh
`CVE-2019-17335`TIBCO Spotfire Server Exposes User-Specific Cached Data To Others Users	Exploitation statusNot confirmed	FixYes	Affected productTIBCO Spotfire Analytics Platform for AWS Marketplace	Published12/17/2019	SeverityMedium
`CVE-2019-17334`TIBCO Spotfire Analyst and Desktop Remote Code Execution Via Shared Files	Exploitation statusNot confirmed	FixYes	Affected productTIBCO Spotfire Analyst	Published12/17/2019	SeverityHigh
`CVE-2019-17332`TIBCO EBX Add-on For Digital Asset Manager Cross-Site Scripting Vulnerabilities	Exploitation statusNot confirmed	FixYes	Affected productTIBCO EBX Add-ons	Published11/12/2019	SeverityHigh