Tibco Iprocess Engine vulnerabilities

5 vulnerabilities

Known vulnerabilities in Tibco Iprocess Engine, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

10CVE-2008-1704tibcoenterprise_message_service+1
EPSS score
5.36%
Multiple buffer overflows in TIBCO Software Enterprise Message Service (EMS) before 4.4.3, and iProcess Engine 10.6.0 through 10.6.1, allow remote attackers to execute arbitrary code via a crafted message to the EMS server.9.3CVE-2008-1703tibcoadapter_files_z_os+7
EPSS score
4.76%
Multiple buffer overflows in TIBCO Software Rendezvous before 8.1.0, as used in multiple TIBCO products, allow remote attackers to execute arbitrary code via a crafted message.10CVE-2008-3338tibcohawk+3
EPSS score
4.76%
Multiple buffer overflows in TIBCO Hawk (1) AMI C library (libtibhawkami) and (2) Hawk HMA (tibhawkhma), as used in TIBCO Hawk before 4.8.1; Runtime Agent (TRA) before 5.6.0; iProcess Engine 10.3.0 through 10.6.2 and 11.0.0; and Mainframe Service Tracker before 1.1.0 might allow remote attackers to execute arbitrary code via a crafted message.4.3CVE-2011-2020tibcoiprocess_engine+1
EPSS score
1.26%
Cross-site scripting (XSS) vulnerability in TIBCO iProcess Engine before 11.1.3 and iProcess Workspace before 11.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.4.3CVE-2011-2021tibcoiprocess_engine+1
EPSS score
1.95%
Session fixation vulnerability in TIBCO iProcess Engine before 11.1.3 and iProcess Workspace before 11.3.1 allows remote attackers to hijack web sessions via unspecified vectors.