CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

1823 matches found

attackerkb•added 2021/10/26 5:00 p.m.•10 views

CVE-2021-35499

The Web Reporting component of TIBCO Software Inc.'s TIBCO Nimbus contains easily exploitable Stored Cross Site Scripting XSS vulnerabilities that allow a low privileged attacker to social engineer a legitimate user with network access to execute scripts targeting the affected system or the...

8CVSS6.2AI score0.00595EPSS

SaveExploits0References3

CVE•added 2021/10/26 4:35 p.m.•76 views

CVE-2021-35499

CVE-2021-35499 affects TIBCO Nimbus, specifically the Web Reporting component in Nimbus 10.4.0 and earlier. The vulnerability is stored Cross-Site Scripting (XSS) that can be exploited by a low-privileged attacker to socially engineer a user with network access; the attack requires user interacti...

8CVSS5.7AI score0.00595EPSS

SaveExploits0References2Affected Software1

Cvelist•added 2021/10/26 4:35 p.m.•42 views

CVE-2021-35499 TIBCO Nimbus Stored Cross-site Scripting (XSS) vulnerabilities

8CVSS7.4AI score0.00595EPSS

SaveExploits0References2

CNNVD•added 2021/10/26 12:00 a.m.•11 views

Tibco Software TIBCO Nimbus 跨站脚本漏洞

Tibco Software TIBCO Nimbus is a business application for process documentation from Tibco Software, USA. A cross-site scripting vulnerability exists in TIBCO Nimbus, which stems from a lack of proper validation of client-side data by the web application. An attacker can exploit this vulnerabilit...

8CVSS5.6AI score0.00595EPSS

SaveExploits0References4

Tibco•added 2021/10/19 11:50 p.m.•23 views

TIBCO Security Advisory: October 26, 2021 - TIBCO Nimbus -2021-35499

TIBCO Nimbus Stored Cross-site Scripting XSS vulnerabilities Original release date: October 26, 2021 Last revised: CVE-2021-35499 Source: TIBCOSoftware Inc. Products Affected TIBCO Nimbus versions 10.4.0 and below The following component is affected: Web Reporting Description The component listed...

3.5CVSS6.2AI score0.00595EPSS

SaveExploits0Affected Software1

Tibco•added 2021/10/19 11:50 p.m.•29 views

TIBCO Security Advisory: October 26, 2021 - TIBCO Nimbus -2021-35499

8CVSS6.1AI score0.00595EPSS

SaveExploits0Affected Software1

NVD•added 2021/10/13 5:15 p.m.•24 views

CVE-2021-35498

The TIBCO EBX Web Server component of TIBCO Software Inc.'s TIBCO EBX, TIBCO EBX, TIBCO EBX, and TIBCO Product and Service Catalog powered by TIBCO EBX contains a vulnerability that under certain specific conditions allows an attacker to enter a password other than the legitimate password and it...

9.8CVSS0.01313EPSS

SaveExploits0References2

OSV•added 2021/10/13 5:15 p.m.•11 views

CVE-2021-35498

9.8CVSS5.8AI score0.01313EPSS

SaveExploits0References2

Prion•added 2021/10/13 5:15 p.m.•26 views

Design/Logic Flaw

9.3CVSS9.4AI score0.01313EPSS

SaveExploits0References2Affected Software2

attackerkb•added 2021/10/13 5:00 p.m.•6 views

CVE-2021-35498

9.8CVSS7.2AI score0.01313EPSS

SaveExploits0References3Affected Software2

Cvelist•added 2021/10/13 4:55 p.m.•37 views

CVE-2021-35498 TIBCO EBX Insecure Login Mechanism

9.8CVSS9.7AI score0.01313EPSS

SaveExploits0References2

CVE•added 2021/10/13 4:55 p.m.•65 views

CVE-2021-35498

The CVE affects the TIBCO EBX Web Server component and describes an insecure login mechanism where, under certain conditions, an attacker can enter a non-legitimate password that is accepted as valid. Affected products and versions include TIBCO EBX: 5.8.123 and below; 5.9.3–5.9.14; 6.0.0–6.0.1; ...

9.8CVSS9.6AI score0.01313EPSS

SaveExploits0References2Affected Software2

OSV•added 2021/10/12 6:15 p.m.•11 views

CVE-2021-35495

The Scheduler Connection component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server fo...

8.8CVSS5.8AI score0.00826EPSS

SaveExploits0References2

NVD•added 2021/10/12 6:15 p.m.•26 views

CVE-2021-35494

The Rest API component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AWS...

5.7CVSS0.00502EPSS

SaveExploits0References2

NVD•added 2021/10/12 6:15 p.m.•26 views

CVE-2021-35496

The XMLA Connections component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AW...

7.5CVSS0.00641EPSS

SaveExploits0References1

NVD•added 2021/10/12 6:15 p.m.•36 views

CVE-2021-35495

9CVSS0.00826EPSS

SaveExploits0References2

Prion•added 2021/10/12 6:15 p.m.•23 views

Privilege escalation

4CVSS8.3AI score0.00826EPSS

SaveExploits0References2Affected Software1

Prion•added 2021/10/12 6:15 p.m.•30 views

Design/Logic Flaw

6CVSS7.2AI score0.00641EPSS

SaveExploits0References1Affected Software1

Prion•added 2021/10/12 6:15 p.m.•28 views

Race condition

3.5CVSS4.9AI score0.00502EPSS

SaveExploits0References2Affected Software1

Cvelist•added 2021/10/12 5:35 p.m.•32 views

CVE-2021-35496 TIBCO JasperReports XML Eternal Entity (XXE) vulnerability

7.5CVSS7.4AI score0.00641EPSS

SaveExploits0References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by