CVE-2017-5535: tibco software inc. tibco datasynapse gridserver manager Inadequate Encryption Strength
Vulnerability summary
CVE-2017-5535 is a medium (CVSS 6.8) Inadequate Encryption Strength vulnerability in tibco software inc. tibco datasynapse gridserver manager. EPSS estimates a 0.18% chance of exploitation in the next 30 days, higher than 7.2% of scored vulnerabilities.
Timeline
- 01-05-2018PublishedVulnerability first disclosed.
- 17-09-2024Last modifiedVulnerability information updated.
Description
The GridServer Broker, GridServer Driver, and GridServer Engine components of TIBCO Software Inc. TIBCO DataSynapse GridServer Manager contain vulnerabilities related to both the improper use of encryption mechanisms and the use of weak ciphers. A malicious actor could theoretically compromise the traffic between any of the components. Affected releases include TIBCO Software Inc.'s TIBCO DataSynapse GridServer Manager: versions up to and including 5.1.3; 6.0.0; 6.0.1; 6.0.2; 6.1.0; 6.1.1; and 6.2.0.
CVSS metrics
3 scores · 2 sources · 2 versions- NVDNIST6.8MediumCVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS trend
Probability
0.18%
Chance of exploitation in the next 30 days
Percentile
7%
Versus all other CVEs
30-day change
0.00 pp
From 0.18% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Tibco1 product
- datasynapse_gridserver_manager≤ 5.1.3 | 6.0.0 | 6.0.1 | 6.0.2 | 6.1.0 | 6.1.1 | 6.2.0
Tibco software inc.1 product
- tibco datasynapse gridserver manager≥ unspecified, ≤ 5.1.3 | 6.0.0 | 6.0.1 | 6.0.2 | 6.1.0 | 6.1.1 | 6.2.0
2 vendors · 2 products