CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

1820 matches found

CVE•added 2021/10/26 4:35 p.m.•74 views

CVE-2021-35499

CVE-2021-35499 affects TIBCO Nimbus, specifically the Web Reporting component in Nimbus 10.4.0 and earlier. The vulnerability is stored Cross-Site Scripting (XSS) that can be exploited by a low-privileged attacker to socially engineer a user with network access; the attack requires user interacti...

8CVSS5.7AI score0.00595EPSS

SaveExploits0References2Affected Software1

CNNVD•added 2021/10/26 12:00 a.m.•11 views

Tibco Software TIBCO Nimbus 跨站脚本漏洞

Tibco Software TIBCO Nimbus is a business application for process documentation from Tibco Software, USA. A cross-site scripting vulnerability exists in TIBCO Nimbus, which stems from a lack of proper validation of client-side data by the web application. An attacker can exploit this vulnerabilit...

8CVSS5.6AI score0.00595EPSS

SaveExploits0References4

Tibco•added 2021/10/19 11:50 p.m.•22 views

TIBCO Security Advisory: October 26, 2021 - TIBCO Nimbus -2021-35499

TIBCO Nimbus Stored Cross-site Scripting XSS vulnerabilities Original release date: October 26, 2021 Last revised: CVE-2021-35499 Source: TIBCOSoftware Inc. Products Affected TIBCO Nimbus versions 10.4.0 and below The following component is affected: Web Reporting Description The component listed...

3.5CVSS6.2AI score0.00595EPSS

SaveExploits0Affected Software1

Tibco•added 2021/10/19 11:50 p.m.•28 views

TIBCO Security Advisory: October 26, 2021 - TIBCO Nimbus -2021-35499

8CVSS6.7AI score0.00595EPSS

SaveExploits0Affected Software1

NVD•added 2021/10/13 5:15 p.m.•24 views

CVE-2021-35498

The TIBCO EBX Web Server component of TIBCO Software Inc.'s TIBCO EBX, TIBCO EBX, TIBCO EBX, and TIBCO Product and Service Catalog powered by TIBCO EBX contains a vulnerability that under certain specific conditions allows an attacker to enter a password other than the legitimate password and it...

9.8CVSS0.01313EPSS

SaveExploits0References2

OSV•added 2021/10/13 5:15 p.m.•11 views

CVE-2021-35498

9.8CVSS5.8AI score0.01313EPSS

SaveExploits0References2

Prion•added 2021/10/13 5:15 p.m.•26 views

Design/Logic Flaw

9.3CVSS9.4AI score0.01313EPSS

SaveExploits0References2Affected Software2

ATTACKERKB•added 2021/10/13 5:00 p.m.•6 views

CVE-2021-35498

9.8CVSS7.2AI score0.01313EPSS

SaveExploits0References3Affected Software2

Cvelist•added 2021/10/13 4:55 p.m.•36 views

CVE-2021-35498 TIBCO EBX Insecure Login Mechanism

9.8CVSS9.7AI score0.01313EPSS

SaveExploits0References2

CVE•added 2021/10/13 4:55 p.m.•63 views

CVE-2021-35498

The CVE affects the TIBCO EBX Web Server component and describes an insecure login mechanism where, under certain conditions, an attacker can enter a non-legitimate password that is accepted as valid. Affected products and versions include TIBCO EBX: 5.8.123 and below; 5.9.3–5.9.14; 6.0.0–6.0.1; ...

9.8CVSS9.6AI score0.01313EPSS

SaveExploits0References2Affected Software2

OSV•added 2021/10/12 6:15 p.m.•10 views

CVE-2021-35495

The Scheduler Connection component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server fo...

8.8CVSS5.8AI score0.00826EPSS

SaveExploits0References2

NVD•added 2021/10/12 6:15 p.m.•26 views

CVE-2021-35494

The Rest API component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AWS...

5.7CVSS0.00502EPSS

SaveExploits0References2

NVD•added 2021/10/12 6:15 p.m.•26 views

CVE-2021-35496

The XMLA Connections component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AW...

7.5CVSS0.00641EPSS

SaveExploits0References1

NVD•added 2021/10/12 6:15 p.m.•36 views

CVE-2021-35495

9CVSS0.00826EPSS

SaveExploits0References2

Prion•added 2021/10/12 6:15 p.m.•23 views

Privilege escalation

4CVSS8.3AI score0.00826EPSS

SaveExploits0References2Affected Software1

Prion•added 2021/10/12 6:15 p.m.•29 views

Design/Logic Flaw

6CVSS7.2AI score0.00641EPSS

SaveExploits0References1Affected Software1

Prion•added 2021/10/12 6:15 p.m.•28 views

Race condition

3.5CVSS4.9AI score0.00502EPSS

SaveExploits0References2Affected Software1

Cvelist•added 2021/10/12 5:35 p.m.•32 views

CVE-2021-35496 TIBCO JasperReports XML Eternal Entity (XXE) vulnerability

7.5CVSS7.4AI score0.00641EPSS

SaveExploits0References1

CVE•added 2021/10/12 5:35 p.m.•79 views

CVE-2021-35496

The CVE-2021-35496 entry concerns the XMLA Connections component in TIBCO JasperReports Server (and variants) with a low-privilege, network-accessible attacker able to interfere with XML processing. Affected products/releases include JasperReports Server 7.2.1 and below, 7.5.0/7.5.1, 7.8.0, 7.9.0...

7.5CVSS7.3AI score0.00641EPSS

SaveExploits0References1Affected Software1

CVE•added 2021/10/12 5:35 p.m.•69 views

CVE-2021-35495

CVE-2021-35495 — TIBCO JasperReports Server Scheduler Connection exposure : An authenticated user with network access can obtain FTP passwords of other users via the Scheduler Connection component. Affected products include TIBCO JasperReports Server and variants (Community, Developer, AWS Market...

9CVSS8.6AI score0.00826EPSS

SaveExploits0References2Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by