CVEs we hold for Tibco

Records whose assigning authority named Tibco as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-3912TIBCO ActiveMatrix BusinessWorks Injection VulnerabilityTibco Enterprise Administrator

CVE-2026-3207TIBCO BPM Enterprise Remote Code Execution (RCE) VulnerabilityTIBCO BPM Enterprise

CVE-2025-3751TIBCO ActiveMatrix BusinessWorks SQL Injection VulnerabilityTIBCO ActiveMatrix BusinessWorks

CVE-2025-2261TIBCO BPM Enterprise XSS VulnerabilityTIBCO BPM Enterprise

CVE-2024-4576TIBCO EBX File Inclusion VulnerabilityTibco EBX

CVE-2024-3323Reflected Cross Site Scripting (XSS) vulnerabilityTIBCO JasperReports Server

CVE-2024-3182no title heldTIBCO Hawk

CVE-2024-1138TIBCO FTL Privilege EscalationTIBCO FTL - Enterprise Edition

CVE-2024-1137TIBCO ActiveSpaces Information Leak VulnerabilityTIBCO ActiveSpaces - Enterprise Edition

CVE-2024-10218TIBCO Hawk Stored-XEE VulnerabilityTIBCO Operational Intelligence

CVE-2024-10217TIBCO Hawk Stored-XSS VulnerabilityTIBCO Operational Intelligence

CVE-2023-29268TIBCO Spotfire Statistics Services Unrestricted File Upload VulnerabilityTIBCO Spotfire Statistics Services

CVE-2023-26222TIBCO EBX Cross-site Scripting (XXS) VulnerabilityTIBCO EBX

CVE-2023-26221TIBCO Spotfire Insufficiently Protected Credential vulnerabilityTIBCO Software Inc. Spotfire for AWS Marketplace

CVE-2023-26220TIBCO Spotfire Stored Cross-site Scripting (XSS) vulnerabilityTIBCO Software Inc. Spotfire Server

CVE-2023-26219TIBCO Operational Intelligence Hawk RedTail Credential Exposure VulnerabilityTIBCO Runtime Agent

CVE-2023-26218TIBCO Nimbus Reflected Cross-site Scripting (XSS) vulnerabilitiesTIBCO Nimbus

CVE-2023-26217TIBCO EBX Add-ons SQL Injection VulnerabilityTIBCO EBX Add-ons

CVE-2023-26216TIBCO EBX Add-ons Arbitrary File WriteTIBCO EBX Add-ons

CVE-2023-26215TIBCO EBX® Add-ons Path TraversalTIBCO EBX Add-ons

CVE-2023-26214TIBCO BusinessConnect Reflected XSS VulnerabilityTIBCO BusinessConnect

CVE-2022-41567TIBCO BusinessConnect Stored XSS VulnerabilityTIBCO BusinessConnect

CVE-2022-41566TIBCO EBX Add-ons Cross Site Scripting (XSS) VulnerabilityTIBCO EBX Add-ons

CVE-2022-41565TIBCO EBX Cross Site Scripting (XSS) VulnerabilityTIBCO EBX

CVE-2022-41564TIBCO Operational Intelligence Hawk Redtail Credential Exposure VulnerabilityTIBCO Operational Intelligence Hawk RedTail

CVE-2022-41563TIBCO JasperReports Server Stored XSS VulnerabilityTIBCO JasperReports Server for Microsoft Azure

CVE-2022-41562TIBCO JasperReports Server XSS Issue on RolesTIBCO JasperReports Server for Microsoft Azure

CVE-2022-41561TIBCO JasperReports Server RCE VulnerabilityTIBCO JasperReports Server for Microsoft Azure

CVE-2022-41560TIBCO Nimbus Denial of Service VulnerabilityTIBCO Nimbus

CVE-2022-41559TIBCO Nimbus Open Redirect VulnerabilityTIBCO Nimbus

CVE-2022-41558TIBCO Spotfire Stored Cross Site Scripting (XSS) VulnerabilityTIBCO Spotfire Server

CVE-2022-30579TIBCO Spotfire Server Blind SSRF vulnerabilityTIBCO Spotfire Server

CVE-2022-30578TIBCO EBX Add-ons Stored XSS vulnerabilityTIBCO EBX Add-ons

CVE-2022-30577TIBCO EBX Stored XSS vulnerabilityTIBCO EBX

CVE-2022-30576TIBCO Statistica Stored Cross Site Scripting (XSS) VulnerabilityTIBCO Statistica Trial

CVE-2022-30575TIBCO Statistica Reflected Cross Site Scripting (XSS) VulnerabilityTIBCO Statistica Trial

CVE-2022-30574TIBCO eFTL Secret JackingTIBCO eFTL - Enterprise Edition

CVE-2022-30573TIBCO FTL Privilege EscalationTIBCO FTL - Enterprise Edition

CVE-2022-30572TIBCO iWay Service Manager Directory Traversal VulnerabilityTIBCO iWay Service Manager

CVE-2022-30571TIBCO iWay Service Manager Reflected Cross Site Scripting (XSS) VulnerabilityTIBCO iWay Service Manager

CVE-2022-30570TIBCO Data Virtualization Access Control VulnerabilityTIBCO Data Virtualization for AWS Marketplace

CVE-2022-22778TIBCO BusinessConnect Trading Community Management Cross-Site Request Forgery VulnerabilityTIBCO BusinessConnect Trading Community Management

CVE-2022-22777TIBCO BusinessConnect Trading Community Management Reflected Cross Site Scripting VulnerabilityTIBCO BusinessConnect Trading Community Management

CVE-2022-22776TIBCO BusinessConnect Trading Community Management Stored Cross Site Scripting VulnerabilityTIBCO BusinessConnect Trading Community Management

CVE-2022-22775TIBCO ActiveMatrix BPM Reflected Cross Site Scripting (XSS) vulnerabilityTIBCO Silver Fabric

CVE-2022-22774TIBCO Managed File Transfer Command Center XXE VulnerabilityTIBCO Managed File Transfer Internet Server

CVE-2022-22773TIBCO JasperReports Server Reflected Cross Site Scripting (XSS) vulnerabilityTIBCO JasperReports Server for Microsoft Azure

CVE-2022-22772TIBCO Managed File Transfer Platform Server Remote Code Execution VulnerabilityTIBCO Managed File Transfer Platform Server for z/Linux

CVE-2022-22771TIBCO JasperReports Library Directory Traversal VulnerabilityTIBCO JasperReports Server for Microsoft Azure

CVE-2022-22770TIBCO AuditSafe API Authentication vulnerabilityTIBCO AuditSafe

CVE-2022-22769TIBCO EBX vulnerabilitiesTIBCO EBX

CVE-2021-43055TIBCO eFTL Token Caching VulnerabilityTIBCO eFTL - Enterprise Edition

CVE-2021-43054TIBCO eFTL Token Generation VulnerabilityTIBCO eFTL - Enterprise Edition

CVE-2021-43053TIBCO FTL Secret Exposure VulnerabilityTIBCO FTL - Enterprise Edition

CVE-2021-43052TIBCO FTL Secret Generation VulnerabilityTIBCO FTL - Enterprise Edition

CVE-2021-43051TIBCO Spotfire Server API Authorization VulnerabilityTIBCO Spotfire Server

CVE-2021-43050TIBCO BusinessConnect Container Edition administrative username and passwords leakageTIBCO BusinessConnect Container Edition

CVE-2021-43049TIBCO BusinessConnect Container Edition username and password leakageTIBCO BusinessConnect Container Edition

CVE-2021-43048TIBCO PartnerExpress Click-Jacking vulnerabilityTIBCO PartnerExpress

CVE-2021-43047TIBCO PartnerExpress Cross Site Scripting vulnerabilitiesTIBCO PartnerExpress

CVE-2021-43046TIBCO PartnerExpress Session Token in URLTIBCO PartnerExpress

CVE-2021-35500TIBCO Data Virtualization Arbitrary File Download vulnerabilityTIBCO Data Virtualization for AWS Marketplace

CVE-2021-35499TIBCO Nimbus Stored Cross-site Scripting (XSS) vulnerabilitiesTIBCO Nimbus

CVE-2021-35498TIBCO EBX Insecure Login MechanismTIBCO EBX

CVE-2021-35497TIBCO FTL unvalidated SAN in client certificatesTIBCO eFTL - Enterprise Edition

CVE-2021-35496TIBCO JasperReports XML Eternal Entity (XXE) vulnerabilityTIBCO JasperReports Server for Microsoft Azure

CVE-2021-35495TIBCO JasperReports FTP Password exposedTIBCO JasperReports Server for Microsoft Azure

CVE-2021-35494TIBCO JasperReports unauthorized access to temporary objectTIBCO JasperReports Server for Microsoft Azure

CVE-2021-35493TIBCO WebFOCUS Cross Site Scripting vulnerabilitiesTIBCO WebFOCUS Reporting Server

CVE-2021-28830TIBCO Spotfire Windows Platform Artifact Search vulnerabilityTIBCO Spotfire Statistics Services

CVE-2021-28829TIBCO Administrator CSV injection vulnerabilityTIBCO Administrator - Enterprise Edition for z/Linux

CVE-2021-28828TIBCO Administrator SQL injection vulnerabilityTIBCO Administrator - Enterprise Edition for z/Linux

CVE-2021-28827TIBCO Administrator Stored Cross Site Scripting vulnerabilityTIBCO Runtime Agent for z/Linux

CVE-2021-28826TIBCO Messaging - Eclipse Mosquitto Distribution - Bridge Windows Platform Installation vulnerabilityTIBCO Messaging - Eclipse Mosquitto Distribution - Bridge -…

CVE-2021-28825TIBCO Messaging - Eclipse Mosquitto Distribution - Core Windows Platform Installation vulnerabilityTIBCO Messaging - Eclipse Mosquitto Distribution - Core -…

CVE-2021-28824TIBCO ActiveSpaces Windows Platform Installation vulnerabilityTIBCO ActiveSpaces - Enterprise Edition

CVE-2021-28823TIBCO eFTL Windows Platform Installation vulnerabilityTIBCO eFTL - Enterprise Edition

CVE-2021-28822TIBCO Enterprise Message Service Windows Platform Artifact Search vulnerabilityTIBCO Enterprise Message Service - Developer Edition

CVE-2021-28821TIBCO Enterprise Message Service Windows Platform Installation vulnerabilityTIBCO Enterprise Message Service - Developer Edition

CVE-2021-28820TIBCO FTL Windows Platform Artifact Search vulnerabilityTIBCO FTL - Enterprise Edition

CVE-2021-28819TIBCO FTL Windows Platform Installation vulnerabilityTIBCO FTL - Enterprise Edition

CVE-2021-28818TIBCO Rendezvous Windows Platform Artifact Search vulnerabilityTIBCO Rendezvous Developer Edition

CVE-2021-28817TIBCO Rendezvous Windows Platform Installation vulnerabilityTIBCO Rendezvous Developer Edition

CVE-2021-23275TIBCO Spotfire Windows Platform Installation vulnerabilityTIBCO Spotfire Statistics Services

CVE-2021-23274TIBCO API Exchange Gateway Clickjack VulnerabilityTIBCO Silver Fabric

CVE-2021-23273TIBCO Spotfire Cross Site Scripting VulnerabilityTIBCO Spotfire Server

CVE-2021-23272TIBCO BPM Cross Site Scripting (XSS)TIBCO Silver Fabric

CVE-2021-23271TIBCO EBX Cross Site Scripting (XSS)TIBCO EBX

CVE-2020-9417TIBCO Foresight SQL InjectionTIBCO Foresight Transaction Insight Healthcare Edition

CVE-2020-9416TIBCO Spotfire Stored Cross Site Scripting VulnerabilityTIBCO Spotfire Server

CVE-2020-9415TIBCO Data VirtualizationTIBCO Data Virtualization for AWS Marketplace

CVE-2020-9414TIBCO Managed File Transfer reflected XSS vulerabilityTIBCO Managed File Transfer Internet Server

CVE-2020-9413TIBCO Managed File Transfer reflected XSS vulerabilityTIBCO Managed File Transfer Internet Server

CVE-2020-9412TIBCO Managed File Transfer Platform Server for IBM i Arbitrary Command ExecutionTIBCO Managed File Transfer Platform Server for IBM i

CVE-2020-9411TIBCO Managed File Transfer Platform Server for IBM i Authentication BypassTIBCO Managed File Transfer Platform Server for IBM i

CVE-2020-9410TIBCO JasperReports LibraryTIBCO JasperReports Server for ActiveMatrix BPM

CVE-2020-9409TIBCO JasperReports Server Fails To Enforce Access RestrictionsTIBCO JasperReports Server for ActiveMatrix BPM

CVE-2020-9408TIBCO Spotfire Server Script Trust Problem Exposes Remote Code Execution VulnerabilityTIBCO Spotfire Server

CVE-2020-27148TIBCO EBX EXML External EntityTIBCO EBX Add-ons

CVE-2020-27147TIBCO PartnerExpress REST APITIBCO PartnerExpress

CVE-2020-27146TIBCO iProcess Workspace Browser CSRFTIBCO iProcess Workspace (Browser)

CVE-2019-8995TIBCO ActiveMatrix BPM Open Redirect VulnerabilityTIBCO Silver Fabric Enabler for ActiveMatrix BPM

CVE-2019-8994TIBCO ActiveMatrix BPM Escalation of Privileges VulnerabilityTIBCO Silver Fabric Enabler for ActiveMatrix BPM

CVE-2019-8993TIBCO Active Matrix Service Grid Administrator Unauthenticated Download of Sensitive FileTIBCO Silver Fabric Enabler for ActiveMatrix Service Grid

CVE-2019-8992TIBCO Active Matrix Service Grid Administrator Remote Code ExecutionTIBCO Silver Fabric Enabler for ActiveMatrix Service Grid

CVE-2019-8991TIBCO Active Matrix Service Grid Administrator With Multiple Cross-Site Scripting and Cross-Site Request Forgery…TIBCO Silver Fabric Enabler for ActiveMatrix Service Grid

CVE-2019-8990TIBCO ActiveMatrix BusinessWorks Fails To Properly Enforce AuthenticationTIBCO ActiveMatrix BusinessWorks

CVE-2019-8989TIBCO Spotfire Data Science Spoofing VulnerabilityTIBCO Spotfire Data Science

CVE-2019-8988TIBCO Spotfire Data Science Privilege Escalation VulnerabilityTIBCO Spotfire Data Science

CVE-2019-8987TIBCO Spotfire Data Science Vulnerable to Persistent Cross-Site ScriptingTIBCO Spotfire Data Science

CVE-2019-8986TIBCO JasperReports Server XML Entity Expansion VulnerabilityTIBCO JasperReports Server for ActiveMatrix BPM

CVE-2019-17339TIBCO Silver Fabric XSS vulerabilityTIBCO Silver Fabric

CVE-2019-17338TIBCO Patterns - Search Exposes Cross Site Scripting VulnerabilitiesTIBCO Patterns - Search

CVE-2019-17337TIBCO Spotfire Server Library Vulnerable to Reflected Cross-Site ScriptingTIBCO Spotfire Server

CVE-2019-17336TIBCO Spotfire Web Player Potentially Exposes Credentials For Shared Data SourcesTIBCO Spotfire Server

CVE-2019-17335TIBCO Spotfire Server Exposes User-Specific Cached Data To Others UsersTIBCO Spotfire Server

CVE-2019-17334TIBCO Spotfire Analyst and Desktop Remote Code Execution Via Shared FilesTIBCO Spotfire Desktop Language Packs

CVE-2019-17333TIBCO EBX Exposes Cross-Site Scripting VulnerabilityTIBCO EBX

CVE-2019-17332TIBCO EBX Add-on For Digital Asset Manager Cross-Site Scripting VulnerabilitiesTIBCO EBX Add-ons

CVE-2019-17331TIBCO EBX Add-on For Data Exchange Cross-Site Scripting VulnerabilitiesTIBCO EBX Add-ons

CVE-2019-17330TIBCO EBX Exposes Multiple Cross-Site Scripting VulnerabilitiesTIBCO EBX

CVE-2019-11212TIBCO MDM Exposes Cross-Site Scripting VulnerabilitiesTIBCO MDM

CVE-2019-11211TIBCO Enterprise Runtime for R Server Running On Linux With Containerized TERR Service Vulnerable To Remote Code…TIBCO Spotfire Analytics Platform for AWS Marketplace

CVE-2019-11210TIBCO Enterprise Runtime for R Server Exposes Remote Code ExecutionTIBCO Spotfire Analytics Platform for AWS Marketplace

CVE-2019-11209TIBCO FTL Escalation Of Privileges for Realm ConfigurationTIBCO FTL Enterprise Edition

CVE-2019-11208TIBCO API Exchange Processes OAuth IncorrectlyTIBCO Silver Fabric

CVE-2019-11207TIBCO LogLogic Log Management Intelligence Multiple Cross-Site Scripting (XSS) and Cross-Site Request Forgery (CSRF)…TIBCO LogLogic Log Management Intelligence

CVE-2019-11206TIBCO Spotfire Server Vulnerabilities With Integrity of Comments and BookmarksTIBCO Spotfire Server

CVE-2019-11205TIBCO Spotfire Server Exposes Multiple Reflected Cross-Site Scripting VulnerabilitiesTIBCO Spotfire Server

CVE-2019-11204TIBCO Spotfire Statistics Services Exposes Sensitive FilesTIBCO Spotfire Statistics Services

CVE-2019-11203TIBCO ActiveMatrix BPM Cross-Site Scripting and Cross-Site Request Forgery VulnerabilitiesTIBCO Silver Fabric Enabler for ActiveMatrix BPM

CVE-2018-5437TIBCO Spotfire Product Family Information Disclosure VulnerabilityTIBCO Spotfire Desktop Language Packs

CVE-2018-5436TIBCO Spotfire Server information disclosure vulnerabilitiesTIBCO Spotfire Server

CVE-2018-5435TIBCO Spotfire Product Family Remote Code Execution VulnerabilityTIBCO Spotfire Desktop Language Packs

CVE-2018-5434XML eXternal Entity Expansion Vulnerabilities with TIBCO Runtime AgentTIBCO Runtime Agent for z/Linux

CVE-2018-5433XML eXternal Entity Expansion Vulnerabilities with TIBCO AdministratorTIBCO Administrator - Enterprise Edition for z/Linux

CVE-2018-5432TIBCO Administrator - Enterprise Edition Cross-Site Scripting VulnerabilityTIBCO Administrator - Enterprise Edition for z/Linux

CVE-2018-5431TIBCO JasperReports Server Cross Site Scripting VulnerabilityTIBCO Jaspersoft Reporting and Analytics for AWS

CVE-2018-5430TIBCO JasperReports Server Information Disclosure VulnerabilityTIBCO Jaspersoft Reporting and Analytics for AWS

CVE-2018-5429TIBCO JasperReports Library Code Sandboxing ProblemTIBCO Jaspersoft Studio for ActiveMatrix BPM

CVE-2018-5428TIBCO Data Virtualization Command Injection VulnerabilityTIBCO Data Virtualization

CVE-2018-18816TIBCO JasperReports Persistent Cross Site Scripting VulnerabilityTIBCO Jaspersoft Reporting and Analytics for AWS

CVE-2018-18815TIBCO JasperReports Server User Information DisclosureTIBCO Jaspersoft Reporting and Analytics for AWS

CVE-2018-18814TIBCO Spotfire Authentication VulnerabilityTIBCO Spotfire Server

CVE-2018-18813TIBCO Spotfire Reflected and Persistent Cross-Site Scripting VulnerabilitiesTIBCO Spotfire Server

CVE-2018-18812TIBCO Spotfire Fails To Prevent Write Access to Spotfire LibraryTIBCO Spotfire Server versions

CVE-2018-18810TIBCO Managed File Transfer Credentials DisclosureTIBCO Managed File Transfer Internet Server

CVE-2018-18809TIBCO JasperReports Library Directory Traversal VulnerabilityTIBCO Jaspersoft Reporting and Analytics for AWS

CVE-2018-18808TIBCO JasperReports Server Privilege Escalation Via Race ConditionTIBCO Jaspersoft Reporting and Analytics for AWS

CVE-2018-18807TIBCO Statistica Server Vulnerable to Cross Site ScriptingTIBCO Statistica Server

CVE-2018-12416TIBCO DataSynapse GridServer Manager Component Vulnerable to Cross-Site Request ForgeryTIBCO DataSynapse GridServer Manager

CVE-2018-12415TIBCO Enterprise Message Service Vulnerable to CSRF AttacksTIBCO Enterprise Message Service - Developer Edition

CVE-2018-12414TIBCO Rendezvous Vulnerable to CSRF AttacksTIBCO Substation ES

CVE-2018-12413TIBCO Messaging - Apache Kafka Distribution - Schema Repository Vulnerable to CSRF AttacksTIBCO Messaging - Apache Kafka Distribution - Schema…

CVE-2018-12412TIBCO FTL Realm Server Vulnerable to CSRF AttacksTIBCO FTL - Enterprise Edition

CVE-2018-12411TIBCO ActiveSpaces Administrative Daemon Vulnerable to CSRF AttacksTIBCO ActiveSpaces - Enterprise Edition

CVE-2018-12410TIBCO Spotfire Statistics Services remote execution vulnerabilitiesTIBCO Spotfire Statistics Services

CVE-2018-12408TIBCO ActiveMatrix BusinessWorks 5.X XML eXternal Entity VulnerabilityTIBCO Silver Fabric

CVE-2017-5536TIBCO DataSynapse GridServer manager component vulnerable to cross-site scripting attacksTIBCO DataSynapse GridServer Manager

CVE-2017-5535TIBCO DataSynapse GridServer improper use of encryptionTIBCO DataSynapse GridServer Manager

CVE-2017-5534Improper sandboxing of a third-party component in tibbrTIBCO Software Inc. tibbr Enterprise

CVE-2017-5533TIBCO JasperReports Server credentials disclosureTIBCO Jaspersoft Reporting and Analytics for AWS

CVE-2017-5532TIBCO JasperReports persistent cross site scriptingTIBCO Jaspersoft Studio for ActiveMatrix BPM

CVE-2017-5531no title heldTIBCO Managed File Transfer Internet Server

CVE-2017-5530SAML protocol handling errors in tibbrTIBCO Software Inc. tibbr Enterprise

CVE-2017-5529TIBCO JasperReports Library Information DisclosureTIBCO Jaspersoft Studio for ActiveMatrix BPM

CVE-2017-5528TIBCO JasperReports Server cross-site vulnerabilitiesTIBCO Jaspersoft Reporting and Analytics for AWS

CVE-2017-5527TIBCO Spotfire injection vulnerabilitiesTIBCO Spotfire Analytics Platform for AWS Marketplace

CVE-2017-3181Multiple TIBCO Spotfire components are vulnerable to multiple unspecified SQL-injection vulnerabilities because it…TIBCO Spotfire Client

CVE-2017-3180Multiple TIBCO Spotfire components fail to sanitize user-supplied inout and are vulnerable to cross-site scriptingTIBCO Spotfire Web Player

170 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.