CVE-2018-5432

The CVE-2018-5432 issue affects TIBCO Administrator - Enterprise Edition and TIBCO Administrator - Enterprise Edition for z/Linux. A cross-site scripting (XSS) vulnerability exists in the TIBCO Administrator server component, exploitable via manipulation of artifacts prior to uploading. Affected ...

CVE-2010-0683

The CVE-2010-0683 issue affects TIBCO Administrator versions 5.4.0–5.6.0, specifically the TIBRepoServer5.jar (tibreposerver5.jar) used with the JMS transport. The root cause is improper enforcement of administrator privileges, allowing remote authenticated users to execute arbitrary code on all ...

CVE-2021-28827

CVE-2021-28827 describes a stored cross-site scripting vulnerability in the Administration GUI components of TIBCO Administrator - Enterprise Edition (including Silver Fabric distributions) and TIBCO Runtime Agent (and z/Linux variants). The issue allows an unauthenticated attacker, via social en...

CVE-2018-5433

CVE-2018-5433 describes an XML External Entity (XXE) vulnerability in the TIBCO Administrator server component of the Enterprise Edition and its z/Linux variant. Affected releases are: TIBCO Administrator - Enterprise Edition up to 5.10.0, and TIBCO Administrator - Enterprise Edition for z/Linux ...

CVE-2021-28829

The CVE-2021-28829 issue affects TIBCO Administrator – Enterprise Edition and related distributions for Silver Fabric and z/Linux, specifically the Administration GUI component. The root cause is a CSV injection vulnerability that an attacker with network access can exploit to execute a persisten...

CVE-2021-28828

CVE-2021-28828 affects the Administration GUI of TIBCO Administrator – Enterprise Edition (and related distributions) and for z/Linux, with a SQL injection vulnerability. The issue allows a low-privilege attacker with network access to execute arbitrary SQL against the affected system, potentiall...