TI
Vendor
Tibco
514
CVEs
9
On KEV
1
New 30D
Products
AD9.6
Administrator
Tibco
7 CVEs0 on KEV1 new
JS9.8
Jasperreports Server
Tibco
22 CVEs2 on KEV0 new
JA9.8
Jaspersoft
Tibco
10 CVEs2 on KEV0 new
JR9.8
Jaspersoft Reporting And Analytics
Tibco
10 CVEs2 on KEV0 new
JA8.8
JasperReports
TIBCO
2 CVEs2 on KEV0 new
JL8.8
Jasperreports Library
Tibco
5 CVEs1 on KEV0 new
SS9.8
Spotfire Server
Tibco
28 CVEs0 on KEV0 new
SA10.0
Spotfire Analytics Platform For Aws
Tibco
20 CVEs0 on KEV0 new
RE8.8
Rendezvous
Tibco
16 CVEs0 on KEV0 new
SA9.8
Spotfire Analyst
Tibco
12 CVEs0 on KEV0 new
EM8.8
Enterprise Message Service
Tibco
11 CVEs0 on KEV0 new
MF9.9
Managed File Transfer Command Center
Tibco
10 CVEs0 on KEV0 new
MF9.9
Managed File Transfer Internet Server
Tibco
10 CVEs0 on KEV0 new
SD9.8
Spotfire Desktop
Tibco
10 CVEs0 on KEV0 new
EB9.8
Ebx
Tibco
9 CVEs0 on KEV0 new
EA9.0
Ebx Add-ons
Tibco
9 CVEs0 on KEV0 new
FT8.8
Ftl
Tibco
9 CVEs0 on KEV0 new
RA9.6
Runtime Agent
Tibco
9 CVEs0 on KEV0 new
AB9.8
Activematrix Bpm
Tibco
8 CVEs0 on KEV0 new
AS9.8
Activematrix Service Bus
Tibco
8 CVEs0 on KEV0 new
AS9.8
Activematrix Service Grid
Tibco
8 CVEs0 on KEV0 new
SD9.8
Spotfire Deployment Kit
Tibco
8 CVEs0 on KEV0 new
SF9.8
Silver Fabric Enabler
Tibco
7 CVEs0 on KEV0 new
SA9.8
Spotfire Analytics Platform
Tibco
7 CVEs0 on KEV0 new
SS9.8
Spotfire Statistics Services
Tibco
7 CVEs0 on KEV0 new
HA8.8
Hawk
Tibco
6 CVEs0 on KEV0 new
SD9.8
Spotfire Desktop Language Packs
Tibco
6 CVEs0 on KEV0 new
AB–
Activematrix Businessworks Service Engine
Tibco
5 CVEs0 on KEV0 new
EF8.8
Eftl
Tibco
5 CVEs0 on KEV0 new
IE–
Iprocess Engine
Tibco
5 CVEs0 on KEV0 new
RT–
Rtworks
Tibco
5 CVEs0 on KEV0 new
SL–
Slingshot
Tibco
5 CVEs0 on KEV0 new
SR–
Smartsockets Rtserver
Tibco
5 CVEs0 on KEV0 new
SW5.4
Spotfire Web Player
Tibco
5 CVEs0 on KEV0 new
AC–
Activecatalog
Tibco
4 CVEs0 on KEV0 new
AB8.7
ActiveMatrix BusinessWorks
Tibco
4 CVEs0 on KEV0 new
BU9.8
Businessconnect
Tibco
4 CVEs0 on KEV0 new
CI–
Collaborative Information Manager
Tibco
4 CVEs0 on KEV0 new
DV8.8
Data Virtualization
Tibco
4 CVEs0 on KEV0 new
ER10.0
Enterprise Runtime For R
Tibco
4 CVEs0 on KEV0 new
MA–
Messaging Appliance
Tibco
4 CVEs0 on KEV0 new
NI9.3
Nimbus
Tibco
4 CVEs0 on KEV0 new
PA9.8
Partnerexpress
Tibco
4 CVEs0 on KEV0 new
SA–
Spotfire Analytics Server
Tibco
4 CVEs0 on KEV0 new
SP5.4
Spotfire Professional
Tibco
4 CVEs0 on KEV0 new
SE–
Substantiation ES
Tibco
4 CVEs0 on KEV0 new
AP9.8
Activematrix Policy Director
Tibco
3 CVEs0 on KEV0 new
AC8.8
Activespaces
Tibco
3 CVEs0 on KEV0 new
BE9.8
Bpm Enterprise
Tibco
3 CVEs0 on KEV0 new
BT8.8
Businessconnect Trading Community Management
Tibco
3 CVEs0 on KEV0 new
DS8.1
Data Science For Aws
Tibco
3 CVEs0 on KEV0 new
DV6.5
Data Virtualization For Aws Marketplace
Tibco
3 CVEs0 on KEV0 new
DG8.8
Datasynapse Gridserver Manager
Tibco
3 CVEs0 on KEV0 new
MF9.8
Managed File Transfer Platform Server
Tibco
3 CVEs0 on KEV0 new
PA9.8
Product And Service Catalog Powered BY Tibco Ebx
Tibco
3 CVEs0 on KEV0 new
SF–
Silver Fabric Activematrix Service Grid Distribution
Tibco
3 CVEs0 on KEV0 new
SD8.1
Spotfire Data Science
Tibco
3 CVEs0 on KEV0 new
TI8.8
Tibbr
Tibco
3 CVEs0 on KEV0 new
VA–
Vault
Tibco
3 CVEs0 on KEV0 new
AB6.1
Activematrix Business Process Management
Tibco
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-4034 | AD Administrator Tibco | 8.7 | Sep 29 | TIBCO Administrator Injection Vulnerability |
| CVE-2026-3912 | AB ActiveMatrix BusinessWorks Tibco | 8.7 | Mar 24 | TIBCO ActiveMatrix BusinessWorks Injection Vulnerability |
| CVE-2026-3207 | TB TIBCO BPM Enterprise TIBCO | 9.8 | Mar 17 | TIBCO BPM Enterprise Remote Code Execution (RCE) Vulnerability |
| CVE-2025-3115 | SA Spotfire Analyst Tibco | 9.8 | Apr 9 | Injection Vulnerabilities: Attackers can inject malicious code, potentially gaining control over the system executing these functions |
| CVE-2024-4576 | EB Ebx Tibco | 5.3 | Jun 13 | The component listed above contains a vulnerability that allows an attacker to traverse directories and access sensitive files, leading to unauthorized disclosure of system… |
| CVE-2023-26222 | EB Ebx Tibco | 5.4 | Nov 14 | The Web Application component of TIBCO Software Inc.'s TIBCO EBX and TIBCO Product and Service Catalog powered by TIBCO EBX contains an easily exploitable vulnerability that… |
| CVE-2023-26221 | SA Spotfire Analytics Platform Tibco | 3.9 | Nov 8 | The Spotfire Connectors component of TIBCO Software Inc.'s Spotfire Analyst, Spotfire Server, and Spotfire for AWS Marketplace contains an easily exploitable vulnerability that… |
| CVE-2023-26219 | RA Runtime Agent Tibco | 8.8 | Oct 25 | The Hawk Console and Hawk Agent components of TIBCO Software Inc.'s TIBCO Hawk, TIBCO Hawk Distribution for TIBCO Silver Fabric, TIBCO Operational Intelligence Hawk RedTail, and… |
| CVE-2023-26220 | SA Spotfire Analyst Tibco | 5.4 | Oct 10 | The Spotfire Library component of TIBCO Software Inc.'s Spotfire Analyst and Spotfire Server contains an easily exploitable vulnerability that allows a low privileged attacker… |
| CVE-2023-26218 | NI Nimbus Tibco | 9.0 | Sep 29 | The Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains easily exploitable Reflected Cross Site Scripting (XSS) vulnerabilities that allow a low privileged… |
| CVE-2023-26217 | EA Ebx Add-ons Tibco | 8.8 | Jul 19 | The Data Exchange Add-on component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an easily exploitable vulnerability that allows a low privileged user with import… |
| CVE-2023-26216 | EA Ebx Add-ons Tibco | 7.2 | May 25 | The server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an exploitable vulnerability that allows an attacker to upload files to a directory accessible by the web… |
| CVE-2023-26215 | EA Ebx Add-ons Tibco | 6.5 | May 25 | The server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains a vulnerability that allows an attacker with low-privileged application access to read system files that… |
| CVE-2023-29268 | SS Spotfire Statistics Services Tibco | 9.8 | Apr 26 | The Splus Server component of TIBCO Software Inc.'s TIBCO Spotfire Statistics Services contains a vulnerability that allows an unauthenticated remote attacker to upload or modify… |
| CVE-2023-26214 | BU Businessconnect Tibco | 5.4 | Feb 22 | The BusinessConnect UI component of TIBCO Software Inc.'s TIBCO BusinessConnect contains easily exploitable Reflected Cross Site Scripting (XSS) vulnerabilities that allow a low… |
| CVE-2022-41567 | BU Businessconnect Tibco | 5.4 | Feb 22 | The BusinessConnect UI component of TIBCO Software Inc.'s TIBCO BusinessConnect contains an easily exploitable vulnerability that allows a low privileged attacker with network… |
| CVE-2022-41566 | EA Ebx Add-ons Tibco | 5.4 | Feb 22 | The server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute… |
| CVE-2022-41565 | PA Product And Service Catalog Powered BY Tibco Ebx Tibco | 5.4 | Feb 22 | The Web Application component of TIBCO Software Inc.'s TIBCO EBX and TIBCO Product and Service Catalog powered by TIBCO EBX contains an easily exploitable vulnerability that… |
| CVE-2022-41564 | HA Hawk Tibco | 6.5 | Feb 14 | The Hawk Console component of TIBCO Software Inc.'s TIBCO Hawk and TIBCO Operational Intelligence Hawk RedTail contains a vulnerability that will return the EMS transport password… |
| CVE-2022-41563 | JS Jasperreports Server Tibco | 5.4 | Dec 13 | The Dashboard component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server… |
| CVE-2022-41562 | JS Jasperreports Server Tibco | 8.4 | Dec 13 | The HTML escaping component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports… |
| CVE-2022-41561 | JS Jasperreports Server Tibco | 7.2 | Dec 13 | The JNDI Data Sources component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO… |
| CVE-2022-41560 | NI Nimbus Tibco | 6.5 | Dec 6 | The Statement Set Upload via the Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains an easily exploitable vulnerability that allows a low privileged attacker with… |
| CVE-2022-41559 | NI Nimbus Tibco | 9.3 | Dec 6 | The Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains an easily exploitable vulnerability that allows an unauthenticated attacker with network access to exploit… |
| CVE-2022-41558 | SS Spotfire Server Tibco | 5.4 | Nov 15 | The Visualizations component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analyst, TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS… |
| CVE-2022-30578 | EA Ebx Add-ons Tibco | 9.0 | Sep 21 | The Web Server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an easily exploitable vulnerability that allows a low privileged attacker with network access to… |
| CVE-2022-30577 | EB Ebx Tibco | 9.0 | Sep 21 | The Web Server component of TIBCO Software Inc.'s TIBCO EBX contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute… |
| CVE-2022-30579 | SS Spotfire Server Tibco | 8.4 | Sep 20 | The Web Player component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains a difficult to exploit vulnerability… |
| CVE-2022-30576 | DS Data Science - Workbench Tibco | 5.4 | Aug 16 | The Web Console component of TIBCO Software Inc.'s TIBCO Data Science - Workbench, TIBCO Statistica, TIBCO Statistica - Estore Edition, and TIBCO Statistica Trial contains an… |
| CVE-2022-30575 | DS Data Science - Workbench Tibco | 5.4 | Aug 16 | The Web Console component of TIBCO Software Inc.'s TIBCO Data Science - Workbench, TIBCO Statistica, TIBCO Statistica - Estore Edition, and TIBCO Statistica Trial contains easily… |
| CVE-2022-30574 | FT Ftl Tibco | 7.8 | Aug 9 | TIBCO eFTL Secret Jacking |
| CVE-2022-30573 | FT Ftl Tibco | 8.8 | Aug 9 | TIBCO FTL Privilege Escalation |
| CVE-2022-30572 | IS Iway Service Manager Tibco | 6.5 | Aug 2 | TIBCO iWay Service Manager Directory Traversal Vulnerability |
| CVE-2022-30571 | IS Iway Service Manager Tibco | 5.4 | Aug 2 | TIBCO iWay Service Manager Reflected Cross Site Scripting (XSS) Vulnerability |
| CVE-2022-30570 | DV Data Virtualization Tibco | 6.5 | Jul 19 | The Column Based Security component of TIBCO Software Inc.'s TIBCO Data Virtualization and TIBCO Data Virtualization for AWS Marketplace contains an easily exploitable… |
| CVE-2022-22778 | BT Businessconnect Trading Community Management Tibco | 8.8 | May 18 | The Web Server component of TIBCO Software Inc.'s TIBCO BusinessConnect Trading Community Management contains an easily exploitable vulnerability that allows an unauthenticated… |
| CVE-2022-22777 | BT Businessconnect Trading Community Management Tibco | 6.1 | May 18 | The Web Server component of TIBCO Software Inc.'s TIBCO BusinessConnect Trading Community Management contains easily exploitable Reflected Cross Site Scripting (XSS)… |
| CVE-2022-22776 | BT Businessconnect Trading Community Management Tibco | 5.4 | May 18 | The Web Server component of TIBCO Software Inc.'s TIBCO BusinessConnect Trading Community Management contains easily exploitable vulnerabilities that allows a low privileged… |
| CVE-2022-22775 | BE Bpm Enterprise Tibco | 5.4 | May 17 | The Workspace client component of TIBCO Software Inc.'s TIBCO BPM Enterprise and TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric contains difficult to exploit Reflected… |
| CVE-2022-22773 | JS Jasperreports Server Tibco | 5.4 | May 17 | The REST API component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO… |
| CVE-2022-22774 | MF Managed File Transfer Command Center Tibco | 9.1 | May 10 | The DOM XML parser and SAX XML parser components of TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center, TIBCO Managed File Transfer Command Center, TIBCO Managed… |
| CVE-2022-22772 | MF Managed File Transfer Platform Server Tibco | 7.5 | Mar 30 | The cfsend, cfrecv, and CyberResp components of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for UNIX and TIBCO Managed File Transfer Platform Server for… |
| CVE-2022-22771 | JL Jasperreports Library Tibco | 8.8 | Mar 15 | The Server component of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server… |
| CVE-2022-22770 | AU Auditsafe Tibco | 9.8 | Feb 15 | The Web Server component of TIBCO Software Inc.'s TIBCO AuditSafe contains an easily exploitable vulnerability that allows an unauthenticated attacker with network access to… |
| CVE-2021-43050 | BU Businessconnect Tibco | 7.8 | Feb 15 | The Auth Server component of TIBCO Software Inc.'s TIBCO BusinessConnect Container Edition contains an easily exploitable vulnerability that allows an unauthenticated attacker… |
| CVE-2021-43049 | BU Businessconnect Tibco | 9.8 | Feb 15 | The Database component of TIBCO Software Inc.'s TIBCO BusinessConnect Container Edition contains an easily exploitable vulnerability that allows an unauthenticated attacker with… |
| CVE-2022-22769 | EB Ebx Tibco | 9.0 | Jan 19 | The Web server component of TIBCO Software Inc.'s TIBCO EBX, TIBCO EBX, TIBCO EBX, TIBCO EBX Add-ons, TIBCO EBX Add-ons, TIBCO EBX Add-ons, and TIBCO Product and Service Catalog… |
| CVE-2021-35500 | DV Data Virtualization Tibco | 5.5 | Jan 12 | The Data Virtualization Server component of TIBCO Software Inc.'s TIBCO Data Virtualization, TIBCO Data Virtualization, TIBCO Data Virtualization, and TIBCO Data Virtualization… |
| CVE-2021-43055 | EF Eftl Tibco | 8.8 | Jan 11 | The eFTL Server component of TIBCO Software Inc.'s TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, and TIBCO eFTL - Enterprise Edition contains an easily… |
| CVE-2021-43054 | EF Eftl Tibco | 8.8 | Jan 11 | The eFTL Server component of TIBCO Software Inc.'s TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, and TIBCO eFTL - Enterprise Edition contains an easily… |
| CVE-2021-43053 | FT Ftl Tibco | 7.5 | Jan 11 | The Realm Server component of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, and TIBCO FTL - Enterprise Edition contains a difficult to… |
| CVE-2021-43052 | FT Ftl Tibco | 7.5 | Jan 11 | The Realm Server component of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, and TIBCO FTL - Enterprise Edition contains an easily exploitable… |
| CVE-2021-43051 | SS Spotfire Server Tibco | 6.8 | Dec 14 | The Spotfire Server component of TIBCO Software Inc.'s TIBCO Spotfire Server, TIBCO Spotfire Server, and TIBCO Spotfire Server contains a difficult to exploit vulnerability that… |
| CVE-2021-43048 | PA Partnerexpress Tibco | 9.8 | Nov 16 | The Interior Server and Gateway Server components of TIBCO Software Inc.'s TIBCO PartnerExpress contain a vulnerability that theoretically allows an unauthenticated attacker with… |
| CVE-2021-43047 | PA Partnerexpress Tibco | 9.0 | Nov 16 | The Interior Server and Gateway Server components of TIBCO Software Inc.'s TIBCO PartnerExpress contain easily exploitable Stored and Reflected Cross Site Scripting (XSS)… |
| CVE-2021-43046 | PA Partnerexpress Tibco | 8.8 | Nov 16 | The Interior Server and Gateway Server components of TIBCO Software Inc.'s TIBCO PartnerExpress contain an easily exploitable vulnerability that allows an unauthenticated attacker… |
| CVE-2021-35499 | NI Nimbus Tibco | 5.4 | Oct 26 | The Web Reporting component of TIBCO Software Inc.'s TIBCO Nimbus contains easily exploitable Stored Cross Site Scripting (XSS) vulnerabilities that allow a low privileged… |
| CVE-2021-35498 | EB Ebx Tibco | 9.8 | Oct 13 | The TIBCO EBX Web Server component of TIBCO Software Inc.'s TIBCO EBX, TIBCO EBX, TIBCO EBX, and TIBCO Product and Service Catalog powered by TIBCO EBX contains a vulnerability… |
| CVE-2021-35496 | JS Jasperreports Server Tibco | 7.5 | Oct 12 | The XMLA Connections component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO… |
| CVE-2021-35495 | JS Jasperreports Server Tibco | 8.8 | Oct 12 | The Scheduler Connection component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO… |