cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,exploited_date,poc,trended,trended_no_1,trended_no_1_date,published,trended_score
CVE-2024-1138,https://securityvulnerability.io/vulnerability/CVE-2024-1138,Privilege Escalation Vulnerability in TIBCO FTL Server Component,"The vulnerability affects the FTL Server component of TIBCO FTL - Enterprise Edition, enabling an attacker with low privileges and network access to execute a privilege escalation attack. This can potentially allow unauthorized access or control over the affected ftlserver instance. Users running versions 6.10.1 and below of TIBCO FTL - Enterprise Edition should take immediate action to mitigate any risks associated with this vulnerability.",Tibco,Tibco Ftl - Enterprise Edition,8.8,HIGH,0.0004299999854993075,false,,false,false,false,,,false,false,,2024-03-12T17:30:15.100Z,0
CVE-2022-30573,https://securityvulnerability.io/vulnerability/CVE-2022-30573,TIBCO FTL Privilege Escalation,"The ftlserver component of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, TIBCO FTL - Enterprise Edition, and TIBCO FTL - Enterprise Edition contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute a privilege escalation on the affected ftlserver. Affected releases are TIBCO Software Inc.'s TIBCO FTL - Community Edition: versions 6.0.0 through 6.8.0, TIBCO FTL - Developer Edition: versions 6.0.1 through 6.8.0, TIBCO FTL - Enterprise Edition: versions 6.0.0 through 6.7.3, and TIBCO FTL - Enterprise Edition: version 6.8.0.",Tibco,"Tibco Ftl - Community Edition,Tibco Ftl - Developer Edition,Tibco Ftl - Enterprise Edition",6.7,MEDIUM,0.0010400000028312206,false,,false,false,false,,,false,false,,2022-08-09T00:00:00.000Z,0
CVE-2022-30574,https://securityvulnerability.io/vulnerability/CVE-2022-30574,TIBCO eFTL Secret Jacking,"The ftlserver component of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, TIBCO FTL - Enterprise Edition, TIBCO FTL - Enterprise Edition, TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, TIBCO eFTL - Enterprise Edition, and TIBCO eFTL - Enterprise Edition contains a difficult to exploit vulnerability that allows a low privileged attacker with local access to obtain user credentials to the affected system. Affected releases are TIBCO Software Inc.'s TIBCO FTL - Community Edition: versions 6.0.0 through 6.8.0, TIBCO FTL - Developer Edition: versions 6.0.1 through 6.8.0, TIBCO FTL - Enterprise Edition: versions 6.0.0 through 6.7.3, TIBCO FTL - Enterprise Edition: version 6.8.0, TIBCO eFTL - Community Edition: versions 6.0.0 through 6.8.0, TIBCO eFTL - Developer Edition: versions 6.0.1 through 6.8.0, TIBCO eFTL - Enterprise Edition: versions 6.0.0 through 6.7.3, and TIBCO eFTL - Enterprise Edition: version 6.8.0.",Tibco,"Tibco Ftl - Community Edition,Tibco Ftl - Developer Edition,Tibco Ftl - Enterprise Edition,Tibco Eftl - Community Edition,Tibco Eftl - Developer Edition,Tibco Eftl - Enterprise Edition",4.6,MEDIUM,0.0004199999966658652,false,,false,false,false,,,false,false,,2022-08-09T00:00:00.000Z,0
CVE-2021-43052,https://securityvulnerability.io/vulnerability/CVE-2021-43052,TIBCO FTL Secret Generation Vulnerability,"The Realm Server component of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, and TIBCO FTL - Enterprise Edition contains an easily exploitable vulnerability that allows authentication bypass due to a hard coded secret used in the default realm server of the affected system. Affected releases are TIBCO Software Inc.'s TIBCO FTL - Community Edition: versions 6.7.2 and below, TIBCO FTL - Developer Edition: versions 6.7.2 and below, and TIBCO FTL - Enterprise Edition: versions 6.7.2 and below.",Tibco,"Tibco Ftl - Community Edition,Tibco Ftl - Developer Edition,Tibco Ftl - Enterprise Edition",9.3,CRITICAL,0.0016700000269338489,false,,false,false,false,,,false,false,,2022-01-11T00:00:00.000Z,0
CVE-2021-43053,https://securityvulnerability.io/vulnerability/CVE-2021-43053,TIBCO FTL Secret Exposure Vulnerability,"The Realm Server component of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, and TIBCO FTL - Enterprise Edition contains a difficult to exploit vulnerability that allows an unauthenticated attacker with network access to obtain the cluster secret of another application connected to the realm server. Affected releases are TIBCO Software Inc.'s TIBCO FTL - Community Edition: versions 6.7.2 and below, TIBCO FTL - Developer Edition: versions 6.7.2 and below, and TIBCO FTL - Enterprise Edition: versions 6.7.2 and below.",Tibco,"Tibco Ftl - Community Edition,Tibco Ftl - Developer Edition,Tibco Ftl - Enterprise Edition",8.5,HIGH,0.0017800000496208668,false,,false,false,false,,,false,false,,2022-01-11T00:00:00.000Z,0
CVE-2021-35497,https://securityvulnerability.io/vulnerability/CVE-2021-35497,TIBCO FTL unvalidated SAN in client certificates,"The FTL Server (tibftlserver) and Docker images containing tibftlserver components of TIBCO Software Inc.'s TIBCO ActiveSpaces - Community Edition, TIBCO ActiveSpaces - Developer Edition, TIBCO ActiveSpaces - Enterprise Edition, TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, TIBCO FTL - Enterprise Edition, TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, and TIBCO eFTL - Enterprise Edition contain a vulnerability that theoretically allows a non-administrative, authenticated FTL user to trick the affected components into creating illegitimate certificates. These maliciously generated certificates can be used to enable man-in-the-middle attacks or to escalate privileges so that the malicious user has administrative privileges. Affected releases are TIBCO Software Inc.'s TIBCO ActiveSpaces - Community Edition: versions 4.3.0, 4.4.0, 4.5.0, 4.6.0, 4.6.1, and 4.6.2, TIBCO ActiveSpaces - Developer Edition: versions 4.3.0, 4.4.0, 4.5.0, 4.6.0, 4.6.1, and 4.6.2, TIBCO ActiveSpaces - Enterprise Edition: versions 4.3.0, 4.4.0, 4.5.0, 4.6.0, 4.6.1, and 4.6.2, TIBCO FTL - Community Edition: versions 6.2.0, 6.3.0, 6.3.1, 6.4.0, 6.5.0, 6.6.0, 6.6.1, and 6.7.0, TIBCO FTL - Developer Edition: versions 6.2.0, 6.3.0, 6.3.1, 6.4.0, 6.5.0, 6.6.0, 6.6.1, and 6.7.0, TIBCO FTL - Enterprise Edition: versions 6.2.0, 6.3.0, 6.3.1, 6.4.0, 6.5.0, 6.6.0, 6.6.1, and 6.7.0, TIBCO eFTL - Community Edition: versions 6.2.0, 6.3.0, 6.3.1, 6.4.0, 6.5.0, 6.6.0, 6.6.1, and 6.7.0, TIBCO eFTL - Developer Edition: versions 6.2.0, 6.3.0, 6.3.1, 6.4.0, 6.5.0, 6.6.0, 6.6.1, and 6.7.0, and TIBCO eFTL - Enterprise Edition: versions 6.2.0, 6.3.0, 6.3.1, 6.4.0, 6.5.0, 6.6.0, 6.6.1, and 6.7.0.",Tibco,"Tibco Activespaces - Community Edition,Tibco Activespaces - Developer Edition,Tibco Activespaces - Enterprise Edition,Tibco Ftl - Community Edition,Tibco Ftl - Developer Edition,Tibco Ftl - Enterprise Edition,Tibco Eftl - Community Edition,Tibco Eftl - Developer Edition,Tibco Eftl - Enterprise Edition",7.5,HIGH,0.0009699999936856329,false,,false,false,false,,,false,false,,2021-10-05T00:00:00.000Z,0
CVE-2021-28819,https://securityvulnerability.io/vulnerability/CVE-2021-28819,TIBCO FTL Windows Platform Installation vulnerability,"The Windows Installation component of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, and TIBCO FTL - Enterprise Edition contains a vulnerability that theoretically allows a low privileged attacker with local access on some versions of the Windows operating system to insert malicious software. The affected component can be abused to execute the malicious software inserted by the attacker with the elevated privileges of the component. This vulnerability results from a lack of access restrictions on certain files and/or folders in the installation. Affected releases are TIBCO Software Inc.'s TIBCO FTL - Community Edition: versions 6.5.0 and below, TIBCO FTL - Developer Edition: versions 6.5.0 and below, and TIBCO FTL - Enterprise Edition: versions 6.5.0 and below.",Tibco,"Tibco Ftl - Community Edition,Tibco Ftl - Developer Edition,Tibco Ftl - Enterprise Edition",8.8,HIGH,0.0004199999966658652,false,,false,false,false,,,false,false,,2021-03-23T00:00:00.000Z,0
CVE-2021-28820,https://securityvulnerability.io/vulnerability/CVE-2021-28820,TIBCO FTL Windows Platform Artifact Search vulnerability,"The FTL Server (tibftlserver), FTL C API, FTL Golang API, FTL Java API, and FTL .Net API components of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, and TIBCO FTL - Enterprise Edition contain a vulnerability that theoretically allows a low privileged attacker with local access on the Windows operating system to insert malicious software. The affected component can be abused to execute the malicious software inserted by the attacker with the elevated privileges of the component. This vulnerability results from the affected component searching for run-time artifacts outside of the installation hierarchy. Affected releases are TIBCO Software Inc.'s TIBCO FTL - Community Edition: versions 6.5.0 and below, TIBCO FTL - Developer Edition: versions 6.5.0 and below, and TIBCO FTL - Enterprise Edition: versions 6.5.0 and below.",Tibco,"Tibco Ftl - Community Edition,Tibco Ftl - Developer Edition,Tibco Ftl - Enterprise Edition",8.8,HIGH,0.0004199999966658652,false,,false,false,false,,,false,false,,2021-03-23T00:00:00.000Z,0
CVE-2019-11209,https://securityvulnerability.io/vulnerability/CVE-2019-11209,TIBCO FTL Escalation Of Privileges for Realm Configuration,"The realm configuration component of TIBCO Software Inc.'s TIBCO FTL Community Edition, TIBCO FTL Developer Edition, TIBCO FTL Enterprise Edition contains a vulnerability that theoretically fails to properly enforce access controls. This issue affects TIBCO FTL Community Edition 6.0.0; 6.0.1; 6.1.0, TIBCO FTL Developer Edition 6.0.1; 6.1.0, and TIBCO FTL Enterprise Edition 6.0.0; 6.0.1; 6.1.0.",Tibco,"Tibco Ftl Community Edition,Tibco Ftl Developer Edition,Tibco Ftl Enterprise Edition",8.8,HIGH,0.0008699999889358878,false,,false,false,false,,,false,false,,2019-08-20T00:00:00.000Z,0
CVE-2018-12412,https://securityvulnerability.io/vulnerability/CVE-2018-12412,TIBCO FTL Realm Server Vulnerable to CSRF Attacks,"The realm server (tibrealmserver) component of TIBCO Software Inc. TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, and TIBCO FTL - Enterprise Edition contains a vulnerability which may allow an attacker to perform cross-site request forgery (CSRF) attacks. Affected releases are TIBCO Software Inc. TIBCO FTL - Community Edition: versions up to and including 5.4.0, TIBCO FTL - Developer Edition: versions up to and including 5.4.0, TIBCO FTL - Enterprise Edition: versions up to and including 5.4.0.",Tibco,"Tibco Ftl - Community Edition,Tibco Ftl - Developer Edition,Tibco Ftl - Enterprise Edition",7.5,HIGH,0.003000000026077032,false,,false,false,false,,,false,false,,2018-11-06T00:00:00.000Z,0